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ABSTRACT 



A system and methods for scheduling 
execution of various types of processes. Using 
information gathered relating to the different 
processes, pre-run-time scheduling is integrated of run- 
time scheduling to guarantee that the executions of the 
processes will satisfy all the specified relations and 
constraints. Whenever a new set of processes arrives in 
the system, the system schedules their execution in two 
phases: a pre-run-time (off-line) phase performed by a 
pre-run-time scheduler, and a run-time scheduler (on- 
line) phase performed by a run-time scheduler. 



A METHOD OF SCHEDULING EXECUTIONS OF PERIODIC A ND 
ASYNCHRONOUS REAL-TIME PROCESSES HAVING HARD OR~SO FT 

DEADLINES " ~ 



5 FIELD OF THE INVENTION 

This invention relates to the field of 
scheduling methods such as scheduling of processes 
carried out by computer or other systems, and in 
particular to improved methods of scheduling execution 

10 of various types of processes. 
BACKGROUND TO THE INVENTION 

In operation of a computer system, executions of 
certain periodically or asynchronously occurring real- 
time processes must be guaranteed to be completed before 

15 specified deadlines, and in addition satisfying various 
constraints and dependencies, such as release times, 
offsets, precedence relations, and exclusion relations. 

Embedded, real-time systems with high assurance 
requirements often must execute many different types of 

20 processes with complex timing and other constraints. 
Some of the processes may be periodic and some of them 
may be asynchronous. Some of the processes may have 
hard deadlines and some of them may have soft deadlines. 
For some of the processes, especially the hard real-time 

25 processes, complete knowledge about their 

characteristics can and must be acquired before run- 
time. For other processes, a prior knowledge of their 
worst case computation time and their data requirements 
may not be known. 

30 Some processes may have complex constraints and 

dependencies between them. For example, a process may 
need to input data that are produced by other processes. 
In this case, a process may not be able to start before 
those other processes are completed. Such constraints 

35 are referred to herein as precedence relations. 
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Exclusion relations may exist between processes 
when some processes must prevent simultaneous access to 
shared resources such as data and I/O devices by other 
processes. For some periodic processes, they may not be 
5 able to start immediately at the beginning of their 
periods. In this case, those 

processes have release time constraints. For some 
periodic processes, the beginning of their first period 
may not start immediately from time zero, that is, the 

10 system start time. In this case, those processes have 
offset constraints. 

Examples of such systems include plant control 
systems, aviation control systems, air traffic control 
systems, satellite control systems, communication 

15 systems, multimedia systems, on-line financial service 
systems, various embedded systems such as for automotive 
applications , etc . 

Previous systems and methods related to 
scheduling executions of real-time processes can be 

20 broadly divided into two categories: 

(a) systems and methods in which determination of the 
execution schedule of all the processes is done entirely 
at run-time (on-line) ; and 

(b) systems and methods in which determination of the 
25 execution schedule of the majority of the processes is 

done before run-time (off-line) . 

The vast majority of systems and methods related 
to scheduling executions of real-time processes belong 
to the first category above. The article "Scheduling 
30 Algorithms For Multiprogramming in a Hard-Real-Time 

Environment", by C. L. Liu, and J. W. Layland, J. ACM, 
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20, 46 - 61, 1973 is the best known representative of 
the priority scheduling approach. It assumes that all 
processes are periodic, and that the major 
characteristics of the processes are known before run- 

5 time, that is, the worst case execution times and period 
are known in advance. Fixed priorities are assigned to 
processes according to their periods; the shorter the 
period, the higher the priority. At any time, the 
process with the highest priority among all processes 

10 ready to run, is assigned the processor. 

A schedulability analysis is performed before 
run-time based on the known process characteristics. If 
certain equations are satisfied, the actual scheduling 
is performed during run-time, and it can be assumed that 

15 all the deadlines will be met at run-time. 

The article "Priority Ceiling Protocols: An 
Approach to Real-Time Synchronization", by L. Sha, R. 
Rajkumar, and J. P. Lehoczky IEEE Trans. On Computers", 
39, 1175 - 1185, 1990, makes the same assumptions as the 

20 Liu et al article, except that in addition, processes 
may have critical sections guarded by semaphores, and a 
protocol is provided for handling them. Similar to Rate 
Monotonic Scheduling, a schedulability analysis is 
performed before run-time based on the known process 

25 characteristics; if certain equations are satisfied, the 
actual scheduling is performed during run-time, and it 
can be assumed that all the deadlines will be met at 
run- time . 

Variations on the above basic scheme have been 
30 proposed, as surveyed by C. J. Fidge in the article 
"Real-Time Schedulability Tests For Preemptive 
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Multitasking", published in Real-Time Systems, vol 14, 
pp. 61-93, January 1998. 

Commercial real-time operating systems perform 
all scheduling activities at run-time, during which at 
5 each point in time, the process with the highest 
priority is selected for execution. 

Systems and methods that perform all scheduling 
activities at run-time, have the following 
disadvantages : 

10 (a) High run-time overhead due to scheduling and context 
switching; 

(b) Difficulty in analyzing and predicting the run-time 
behavior of the system; 

(c) Difficulty in handling various application 
15 constraints and process dependencies; 

(d) Low processor utilization. 

High run-time overhead is partly due to the fact 
that embedded, real-time applications are becoming more 
and more complex, with an ever increasing number of 
20 processes and additional constraints and dependencies 
betlen processes. The amount of run-time resources 
consumed by the scheduler in order 

to compute the schedule, grows very rapidly as the 
number of processes and constraints increase. The 

25 scheduler often needs to perform many time consuming 
process management functions, such as suspending and 
activating processes, manipulating process queues, etc. 
In addition, since the priority scheduler does not know 
the schedule before run-time, it has to assume the worst 

30 case and save/restore complete contexts each time a 
process is preempted by another process. 
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Performing all the scheduling at run-time 
requires the use of complex run-time mechanisms in order 
to achieve process synchronization and prevent 
simultaneous access to shared resources. The run-time 
5 behavior of the scheduler can be very difficult to 
analyze and predict accurately. 

For example, in one published study, fixed 
priority scheduling was implemented using priority 
queues, where tasks are moved between queues by a 

10 scheduler that was released at regular intervals by a 

timer interrupt. It was observed that because the clock 
interrupt handler had a priority greater than any 
application task, even a high priority task could suffer 
long delays while lower priority tasks are moved from 

15 one queue to another. Accurately predicting the 

scheduler overhead proved to be a very complicated task, 
and the estimated scheduler overhead was substantial, 
even though it was assumed that the system had a total 
of only 20 tasks, tasks did not have critical sections, 

20 and priorities Ire not to change. Such difficulties 

would be many times greater if there existed additional 
complex application constraints that would have to be 
satisfied by the synchronization mechanism at run-time. 
The original schedulability analysis given in 

25 the aforenoted paper describing the PCP protocol by Sha 
et. al. above, assumed that all tasks are independent 
tasks, that there are no precedence relations, that 
their release times are equal to the beginning of their 
periods, and all periods have a common start time. It 

30 is difficult to extend the schedulability analysis for 
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priority scheduling to take into account application 
constraints that frequently exist in real-time 
applications, such as precedence constraints, release 
times that are not equal to the beginning of their 
5 periods, offsets, low jitter requirements (limits on the 
variation in time a computed result is output to the 
external environment from cycle to cycle), etc. Despite 
considerable effort spanning more than a decade to 
extend 

10 the original PCP protocol to handle additional 

constraints, not much has been accomplished to this end, 
as evidenced by the absence of methods that can 
satisfactorily deal with such constraints in the survey 
by Fidge mentioned above. 

15 Additional application constraints increase the 

computational complexity of scheduling problems, which 
already have high computational complexity whenever 
processes contain critical sections. When all the 
scheduling is performed at run-time, the scheduler does 

20 not have enough time to find solutions for complex 
problems. Most systems and methods that perform all 
scheduling at run-time, schedule processes according to 
process priorities assigned by the user. However, 
additional application constraints are most likely to 

25 conflict with the user assigned priorities. It is not 
generally possible to map the many different execution 
orderings of processes that are required by the 
different application constraints in a large complex . 
system onto a rigid hierarchy of priorities. 

30 It has been suggested that higher priorities be 

assigned to processes with: shorter periods, higher 
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criticality, loir jitter requirements, precedence 
constraints, etc. Consequently, the system designer i§ 
faced with the impossible task of trying to 
simultaneously satisfy many different application 
5 constraints with one rigid hierarchy of priorities. 

Because of the inherent constraints built into the fixed 
priority scheduling model, (e.g. fixed priorities) and 
because scheduling is performed at run-time, 
attempts to take into account additional constraints 

10 typically result in suggestions that either are only 
applicable to a few very special cases, or make 
drastically simplifying assumptions, which significantly 
reduce schedulability, or are extremely complicated, 
making the run-time behavior of the system very 

15 difficult to analyze and predict. 

In general, systems and methods that perform all 
scheduling activities at run-time achieve lower 
processor utilization than systems and methods that 
schedule processes before run-time. This is largely due 

20 to the fact that when all scheduling activities are 
performed at run-time, the scheduler does not have 
enough time to find good solutions to complex scheduling 
problems, and can only afford to use crude, suboptimal 
methods that do not take into account all the available 

25 information. 

Systems that use priority scheduling methods 
have a much smaller chance of satisfying timing 
constraints, because priority-driven methods are only 
capable of producing a very limited subset of the 

30 possible schedules for a given set of processes. This 
severely restricts the capability of priority-driven 
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systems and methods to satisfy timing and resource 
sharing constraints 
at run-time. 

In general, the smaller the set of schedules 

5 that can be produced by a scheduling system or method, 
the smaller the chances are of finding a feasible 
schedule, and, the loir the level of processor 
utilization that can be achieved. With systems that use 
optimal methods that compute the schedule off-line, it 

10 is possible to achieve higher levels of resource 

utilization than those achievable by priority-driven 
systems. Hence, using priority-driven systems may 
increase the cost of the system to non-competitive 
levels . 

15 When processes are scheduled at run-time, the 

scheduling strategy must avoid deadlocks. In general, 
deadlock avoidance at run-time requires that the run- 
time synchronization mechanism be conservative, 
resulting in situations where a process is blocked by 

20 the run-time synchronization mechanism, even though it 
could have proceeded without causing deadlock. This 
reduces further the level of processor utilization. 

In contrast to conventional approaches where 
most of the processes are scheduled at run-time, with 

25 pre-run-time scheduling the schedule for most of the 
processes is computed off-line; this approach requires 
that the major characteristics of the processes in the 
system be known, or bounded, in advance. It is known* 
that it is possible to use pre-run-time scheduling to 

30 schedule periodic processes. This consists of computing 
off-line a schedule for the entire set of periodic 



8 



processes occurring within a time period that is equal 
to the least common multiple of the periods of the given 
set of processes, then at run-time executing the 
periodic processes in accordance with the previously 
5 computed schedule. 

In pre-run-time scheduling, several alternative 
schedules may be computed off-line for a given time 
period, each such schedule corresponding to a different 
"mode" of operation. A small run-time scheduler can be 

10 used to select among the alternative schedules in 

response to external or internal events. This small 
run-time scheduler can also be used to allocate 
resources for asynchronous processes that have not been 
converted into periodic processes. 

15 It is possible to translate an asynchronous 

process into an equivalent periodic process, if the 
minimum time betlen two consecutive requests is known in 
advance, and the deadline is not too short. Thus it is 
also possible to schedule such asynchronous processes 

20 using pre-run-time scheduling See "The Design of Real- 
Time Programming Systems Based On Process Models", Proc. 
1984 IEEE Real-time systems Symposium, 5-17, 1984. 

Systems and methods that perform scheduling 
before run-time, have the following advantages: 

25 (a) ability to effectively handle complex constraints 
and dependencies; 

(b) lower run-time overhead; 

(c) higher processor utilization; and 

(d) ease of predicting the system's behaviour. 

30 In the majority of real-time applications, the 

bulk of the processing is performed by periodic 
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processes for which the major characteristics of the 
processes, including offsets, release times, worst-case 
execution times, deadlines, precedence and exclusion 
relations, and any other constraints, are known before 

5 run-time. For asynchronous processes, generally their 
worst-case computation times, deadlines, and the minimum 
time betlen two consecutive requests (interarrival 
times) are known in advance. Asynchronous processes 
normally are few in number, and often can be converted 

10 into new periodic processes that can be used to service 
the corresponding asynchronous process requests in a 
manner similar to polling. Thus it is not only 
possible, but highly desirable to schedule all the 
periodic processes, including the new periodic processes 

15 that are converted from some of the asynchronous 

processes, before run-time, rather than scheduling them 
at run-time . 

For the processes whose characteristics are 
known before run-time, such as periodic processes, one 

20 may realize important advantages if the schedule is 

computed before run-time, instead of waiting until run- 
time to schedule them. This is because when scheduling 
is done before run-time, there is almost no limit on the 
running time of the scheduler, optimal scheduling 

25 methods can be used to maximize the possibility of 

finding a feasible schedule for the set of processes to 
be scheduled and to handle complex constraints and 
dependencies. In contrast, when processes are scheduled 
at run-time, the time available to the scheduler is very 

30 limited. This limits the ability of the scheduler to 
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find a feasible schedule and to take into account the 
different types of 

constraints and knowledge about the system processes. 
Once the schedule for the periodic processes has been 
5 defined before run-time, the run-time scheduler can also 
use this information to schedule asynchronous processes 
more efficiently. 

Other reasons for performing scheduling before 
run-time include: this greatly reduces the run-time 

10 resource requirements needed for scheduling and context 
switching. With pre-run-time scheduling, it is possible 
to avoid using sophisticated run-time synchronization 
mechanisms by directly defining precedence relations and 
exclusion relations on pairs of process segments to 

15 achieve process synchronization and prevent simultaneous 
access to shared resources. Because the schedule is 
known in advance, automatic code optimization is 
possible; one can determine in advance the minimum 
amount of information that needs to be saved and 

20 restored, and one can switch processor execution from 
one process to another process through very simple 
mechanisms such as procedure calls, or simply by 
concatenating code when no context needs to be saved or 
restored, which greatly reduces the amount of run-time 

25 overhead. 

When the use of sophisticated run-time 
synchronization mechanisms is avoided, the benefits are 
multi-fold: not only is the amount of run-time overhead 
reduced, but it is also much easier to analyze and 
30 predict the run-time behavior of the system. Compared 
with the complex schedulability analysis required when 
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run-time synchronization mechanisms are used, it is much 
more straightforward to verify that all processes will 
meet their deadlines and that all the additional 
application constraints will be satisfied in an off-line 

5 computed schedule. 

In recent years, there has been an increased 
interest in systems and methods for the purpose of 
automating the process of pre-run-time scheduling, as 
described in the article by S.R. Faulk and D.L. Parnas 

10 "On Synchronization in Hard-Real-time Systems", Commun. 
ACM vol 31, pp. 274-287, March, 1988. Cyclic executives, 
a form of pre-run-time scheduling, have been used in 
safety critical systems, e.g. as described by G.D. 
Carlow in the article "Architecture of the Space Shuttle 

15 Primary Avionics Software System", Commun. ACM, Sept. 
1984. However, in the past, cyclic executives have 
mainly been constructed by hand, and are difficult to 
construct and maintain. In the aforenoted article by 
A.K. Mok, a technique for transforming an asynchronous 

20 process into an equivalent periodic process was 
introduced. Methods for solving the problem of 
scheduling processes with release times, deadlines, 
exclusion and precedence relations are given in the 
article by J.Xu and D. Parnas in the articles "Scheduling 

25 Processes with Relase Times, Deadlines, Precedence and 
Exclusiion Relations", IEEE Trans, on Software 
Engineering, vol 16, pp 360-369, Mar. 1990, by J.Xu and 
D.L. Parnas in "Pre-run-time Scheduling of Processes 
with Exclusion Relations on Nested or Overlapping 

30 Critical Sections", Proc. Eleventh Annual IEEE 

International Phoenix Conference on Computers and 
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Communications, IPCCC-92, Scottsdale, Arizona, April 1- 
3, 1992, and by J.Xu and D.L. Parnas in "On Satisfying 
Timing Constraints in Hard-Real-Time Systems", IEEE 
Trans, on Software Engineering, vol 19, ppl-17, Jan. 
5 1993, which are incorporated herein by reference. 

However, until now, unsolved problems have been 
main obstacles to fully automating the process of 
constructing scheduling systems that combine the pre- 
run-time scheduling of periodic processes with the run- 

io time scheduling of asynchronous processes, as follows: 
(1) Previously there did not exist any system or method 
that integrates the run-time scheduling of asynchronous 
processes with the pre-run-time scheduling of periodic 
processes, that could effectively satisfy exclusion 

15 relations, precedence relations, offsets and release 
times constraints between the periodic processes, as 
well as any exclusion relation between a periodic 
process and an asynchronous process, and any exclusion 
relation between two asynchronous processes, while 

20 making efficient use of available processor capacity, 
and maximizing the chances of satisfying all the timing 
constraints . 

Previous systems and methods for scheduling 
periodic processes and asynchronous processes, either 

25 perform all the scheduling activities at run-time, or 
assume that any process can be preempted by any other 
process at any time (no exclusion relations can be 
enforced, so one cannot prevent certain data 
inconsistencies that are caused by more than one process 

30 simultaneously accessing shared data) , or assume that 
all aperiodic processes have soft deadlines, or assume 
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that all processes are non-preemptable, which reduces 
the system's flexibility in meeting deadlines, or use ad 
hoc schemes that do not make efficient use of available 
processor capacity, and reduce the chances of satisfying 
5 all the timing constraints. Examples of such systems 
and methods are described in the articles "A 
Reservation-based Algorithm for Scheduling Both Periodic 
and Aperiodic Real-time Tasks", by K.G. Shin and Y.C. 
Chang, IEEE Trans, on Computers, vol 44, pp. 1405-1419, 

10 Dec. 1995, "An Optimal Algorithm For Scheduling Soft 

Aperiodic Tasks in Dynamic-Priority Preemptive Systems", 
by I. Ripoli, A. Crespo and A. Garcia-Fornes, IEEE 
Trans, on Software Eng., vol 23, pp. 388-400, June 1997, 
and "The Deferrable Server Algorithm For Enhanced 

15 Apriodic Responsiveness in Hard Real-Time Environments", 
IEEE Trans, on Computers, vol 44, pp. 73-91, Jan 1995. 
(2) Previously there did not exist any system or method 
for systematically adjusting the period lengths of 
periodic processes, such that the adjusted period 

20 lengths are sufficiently close to the original period 
lengths, to satisfy the processor utilization level 
required by the application, and maximize the chances of 
finding a feasible schedule, while at the same time 
ensuring that the adjusted period lengths are as closely 

25 harmonically related 

to each other (having a smaller LCM value) as possible, 
in order to reduce the schedule length and the number of 
instances of new processes, and reduce storage 
requirements and system overhead. 

30 Previous systems and methods use ad hoc methods 

that do not make the most efficient use of available 
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processor capacity. For example, in cyclic executives, 
each periodic application task is required to complete 
within a fixed size frame, which is of the same size for 
all periodic application tasks. Such arbitrary 
constraints seriously restrict the system's ability to 
meet complex timing constraints . 

(3) Previously there did not exist any system or method 
for systematically determining which asynchronous 
processes should be converted into new periodic 
processes, and which asynchronous processes should 
remain asynchronous, based on whether the ratio of the 
processor capacity that needs to be reserved for the new 
periodic process, to the processor capacity that needs 
to be reserved for the asynchronous process if 
unconverted, exceeds a specified threshold. 

Another embodiment of the present invention 
provides a system and methods for systematically 
adjusting the period lengths of periodic processes, such 
that the adjusted period lengths are sufficiently close 
to the original period lengths, to satisfy the processor 
utilization level required by the application, 
and maximize the chances of finding a feasible schedule, 
while at the same time ensuring that the adjusted period 
lengths are as closely harmonically related to each 
other (having a smaller LCM value) as possible, in order 
to reduce the schedule length and the 

number of instances of new processes, and reduce storage 
requirements and system overhead. 

There are certain asynchronous processes that 
cannot be converted into periodic processes at all, or 
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if converted, may take up far too much processor 
capacity compared with allowing them to remain 
asynchronous. For example, an asynchronous process with 
a very short deadline, a short worst-case execution 
5 time, and with long interarrival times, could require 
that a overly high proportion, sometimes even exceeding 
one hundred percent, of the processor's capacity be 
reserved for that one single process if that process is 
converted into a periodic process for which it is 

10 guaranteed to meet it f s deadline. But that same 

process, may require far less processor capacity be 
reserved for it, if it was not converted into a periodic 
process, and scheduled for execution at run-time as soon 
as it arrives in the system. 

15 Previous systems and methods either 

indiscriminately schedule every asynchronous process at 
run-time as soon as it arrives in the system, or 
indiscriminately try to convert every asynchronous 
process into a periodic process; or rely on ad hoc rules 

20 of thumb. 

(4) Previously there did not exist any system or method 
for systematically converting a given set of 
asynchronous processes into a set of new periodic 
processes that could make the most efficient use of 

25 available processor capacity, and maximize the chances 
of satisfying all the timing constraints. 

In the aforenoted article by A. K. Mok, a 
technique for converting one single asynchronous process 
into a periodic process was described. However, the 

30 technique described in the Mok article did not consider 
the case of non-zero offsets, that is, non-zero 
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intervals between time 0, that is, the system start 
time, and the beginning of their first periods. If only 
zero offsets are allowed, the chances of satisfying all 
the given timing constraints is decreased considerably. 

5 Furthermore, the described technique only deals with one 
process. When more than one process must be converted 
into periodic processes, the new periodic processes may 
have timing conflicts with each other and with the 
original set of asynchronous and periodic processes. 

10 For example, a direct application of the above technique 
might result in more than one periodic process each 
having a release time of zero and a deadline equal to 
the computation time. 

Previous systems and methods use ad hoc methods 

15 that do not make the most efficient use of available 

processor capacity. For example, in cyclic executives, 
each periodic application task is required to complete 
within a fixed size frame, which is of the same size for 
all periodic application tasks. Such arbitrary 

20 constraints seriously restrict the system's ability to 
meet complex timing constraints. 
SUMMARY OF THE INVENTION 

An embodiment of the present invention provides 
a system and method in which pre-run-time scheduling 

25 techniques are combined with run-time scheduling 

techniques, where pre-run-time scheduling is used for 
scheduling the executions of periodic processes, 
including new periodic processes converted from a subset 
of the asynchronous processes, in order to satisfy 

30 complex relations and constraints such as exclusion 

relations, precedence relations, and offset constraints, 
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release time constraints defined on the periodic 
processes, and any exclusion relation betlen a periodic 
process and an asynchronous , process, and any exclusion 
relation between two asynchronous processes, and 
5 deadline constraints of all periodic processes, while 
run-time scheduling is used to schedule a subset of the 
asynchronous processes that would have consumed too much 
processor capacity if converted into periodic processes, 
so that efficient use is made of available processor 
10 capacity, and the chances of satisfying all the timing 
constraints of all processes is increased as much as 
possible. 

In accordance with another embodiment, a pre- 
run-time scheduler may use existing methods that 

15 statically schedules a set of processes (including 

manual methods to satisfy any special requirements if 
necessary) , to construct a feasible pre-run-time 
schedule in which processor capacity is reserved in the 
form of time slots in the pre-run-time schedule for each 

20 periodic process. The time slot for each periodic 
process also includes "room" for the execution of 
asynchronous processes that have less latitude than that 
periodic process in meeting their respective deadlines, 
to allow such asynchronous processes to preempt the 

25 execution of that periodic process at run-time. The 
pre-run-time scheduler adjusts the lengths of the 
periods using specified parameters which achieve a 
suitable balance between the utilization level and the 
length of the pre-run-time schedule. The pre-run-time 

30 scheduler is able to schedule periodic processes 
that have offsets, i.e., intervals between the 
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start of a periodic process 1 first period and time zero, 
that is, the system's start time, and is able to take 
advantage of any flexibility in periodic process offsets 
to increase schedulability . The pre-run-time scheduler 
5 thereby is able to guarantee that every periodic process 
will always be able to meet its deadline, while 
providing good response times for asynchronous 
processes, without requiring any change in the methods 
used in any of the other parts, steps or embodiments of 

10 the present invention. The system and methods have the 
flexibility to employ sophisticated static scheduling 
methods to satisfy complex relations and constraints, 
such as exclusion relations, precedence relations, 
offsets and release times defined on the periodic 

15 processes, and also have the flexibility to incorporate 
and take advantage of any future new static scheduling 
method for satisfying any additional desired constraints 
among the most important and numerous type of processes 
in real-time applications, the periodic processes, while 

20 making efficient use of available processor capacity, 
and increasing as much as possible the chances of 
satisfying the timing constraints all the processes . 
Thus the present invention is able to satisfy more 
complex application constraints and achieve higher 

25 chances of satisfying complex application constraints on 
periodic processes than previous systems and methods. 

in accordance with an embodiment of the 
invention, a run-time scheduler uses the information 
about the beginning times and end times of the time 

30 slots reserved for the execution of periodic processes 
(including those new periodic processes that were 
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converted from asynchronous processes) in the pre-run- 
time schedule, as well as the a priori knowledge of the 
processes characteristics, to make more informed 
decisions and satisfy any exclusion relation between a 
5 periodic process and an asynchronous process, and any 
exclusion relation betlen two asynchronous processes, 
while making efficient use of available processor 
capacity, and achieving higher chances of satisfying all 
the timing constraints of the periodic processes, when 

10 scheduling the execution of asynchronous processes. For 
example, an embodiment of the present invention makes it 
possible to completely avoid blocking of a periodic 
process with a shorter deadline by an asynchronous 
process with a longer deadline, thus achieving higher 

15 schedulability of periodic processes than previous 

systems and methods that schedule all processes at run- 
time . 

In accordance with another embodiment, a run- 
time scheduler can use the information about the 

20 beginning times and end times of the time slots reserved 
for the execution of periodic processes (including those 
new periodic processes that were converted from 
asynchronous processes) in the pre-run-time schedule, as 
well as the a priori knowledge of the processes 

25 characteristics. A significant portion of the 

parameters used by the asynchronous process scheduler to 
make scheduling decisions are known before run-time so 
it is possible to pre-compute major portions of the 
conditions that are used for decision making. Hence the 

30 amount of computation that needs to be performed for 

scheduling purposes at run-time can be minimized, while 
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making efficient use of available processor capacity, 
and increasing as much as possible the chances of 
satisfying all the timing constraints of the 
asynchronous processes. For example, an embodiment of 
5 the present invention makes it possible to create before 
run-time, a table of "safe starting time intervals" for 
each asynchronous process, and achieve loir run-time 
overhead than previous systems and methods by allowing 
the asynchronous processes to be scheduled by simple 
10 table lookup. 

In accordance with another embodiment of the 
invention, bounds on the worst-case response times of 
asynchronous processes are computed, that are more 
accurate (tighter) than that achievable with previous 

15 systems and methods, by using a simulation procedure 
that takes into account the beginning times and end 
times of the time slots reserved for the execution of 
periodic processes including those new periodic 
processes that were converted from asynchronous 

20 processes) in the pre-run-time schedule, as well as the 
a priori knowledge of the processes characteristics, 
when simulating all possible worst-case scenarios of the 
executions of each asynchronous process. 

In accordance with another embodiment, a system 

25 and methods can schedule the executions of both periodic 
and asynchronous real-time processes with hard or soft 
deadlines, with different a priori knowledge of the 
process characteristics, and with constraints and 
dependencies, such as offsets, release times, precedence 

30 relations, and exclusion relations, in real-time on a 

single processor. This exploits to a maximum extent any 
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knowledge about processes 1 characteristics that are 
available to the scheduler both before run-time and 
during run-time, so that processor capacity is used to 
satisfy the constraints 
5 and dependencies of periodic and asynchronous processes 
with hard deadline process as a first priority. Then 
any remaining processor capacity is used to guarantee 
that processes with soft deadlines and known 
characteristics will also be completed before pre- 

10 determined time limits as a second priority. Then any 
remaining processor capacity is used to execute any 
asynchronous process with unknown characteristics on a 
"best-effort" basis. 

In accordance with another embodiment, a system 

15 and methods 

schedule the executions of both periodic and 
asynchronous real-time processes with hard or soft 
deadlines, with different a priori knowledge of the 
process characteristics, and with constraints and 

20 dependencies, such as offsets, release times, precedence 
relations, and exclusion relations, in real-time on a 
single processor. This exploits to a maximum extent any 
knowledge about processes' characteristics that are 
available to the scheduler both before run-time and 

25 during run-time, in order to: 

(a) effectively handle complex application constraints 
and 

dependencies between the real-time processes; 

(b) minimize run-time overhead; 

30 (c) make the most efficient use of available processor 
capacity, 
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(d) maximize the chances of satisfying all the timing 
constraints, and 

(e) provide firm and tight response time guarantees for 
all the processes whose characteristics are known before 

5 run-time; 

(f) make it easier to verify that all timing constraints 
and dependencies will always be satisfied. 

Thus the present invention is able to schedule a 
wider variety of processes with a wider variety of 

10 constraints compared with previous systems and methods. 

In accordance with another embodiment, which 
asynchronous processes should be converted into new 
periodic processes is automatically determined, and 
which asynchronous processes should remain asynchronous. 

15 This is based on whether the ratio of the processor 

capacity that needs to be reserved for the new periodic 
process, to the processor capacity that needs to be 
reserved for the asynchronous process if unconverted, 
exceeds a user or otherwise determined specified 

20 threshold. 

An embodiment of the invention systematically 
converts a given set of asynchronous processes into a 
set of new periodic processes that could make the most 
efficient use of available processor capacity, and 

25 increase as much as possible the chances of satisfying 
all the timing constraints. 

All of the above can be achieved while the 
process of constructing scheduling systems that combine 
pre-run-time scheduling with run-time scheduling of 

30 periodic and asynchronous processes is fully automated, 
while the most efficient use of available processor 
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capacity is achieved, the chances of satisfying all the 
timing constraints is increased as much as possible. 
Thus the present invention can achieve a much higher 
degree of automation, and substantially reduce the cost 
5 of designing the system and of making changes to the 
systems to meet new requirements, reduce the chances of 
errors, as compared with previous systems and methods 
that schedule processes before run-time. 

An embodiment of the present invention provides 

10 a system and methods for scheduling execution of both 
periodic and asynchronous real-time processes with hard 
or soft deadlines, with different a priori knowledge of 
the process characteristics, such that complex relations 
and constraints, such as exclusion relations, precedence 

15 relations, offset constraints and release time 

constraints defined on the hard deadline periodic 
processes, and any exclusion relation between a hard 
deadline periodic process and a hard deadline 
asynchronous process, and any exclusion relation between 

20 two hard deadline asynchronous processes, and deadline 
constraints of all hard deadline processes, can be 
satisfied on a single processor. 

An embodiment of the present invention 
integrates pre-run-time scheduling with run-time 

25 scheduling to guarantee that the executions of the 

processes will satisfy all the specified relations and 
constraints. Whenever a new set of processes arrives in 
the system, the system schedules their executions in two 
phases: a pre-run-time (off-line) phase performed by a 

30 pre-run-time scheduler, and a run-time (on-line) phase 
performed by a run-time scheduler. 
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In accordance with an embodiment of the 
invention, in each pre-run-time phase, the pre-run-time 
scheduler executes five steps, as follows: 

In Step 1, the pre-run-time scheduler divides 
5 asynchronous processes with hard deadlines and known 
characteristics, referred to herein as A-h-k processes, 
into two subsets. One subset of asynchronous processes, 
referred to herein as A-h-k-p processes, are converted 
into new periodic processes by the pre-run-time 

10 scheduler before run-time. When the pre-run-time 

scheduler converts an asynchronous process into a new 
periodic process, it prevents possible timing conflicts 
with other periodic and asynchronous processes, by 
reserving enough "room" (time) prior to each new 

15 periodic process's deadline, to accommodate the 

computation times of all the periodic and asynchronous 
processes that have less latitude in meeting their 
deadlines, to allow such processes to preempt that new 
periodic process if possible at run-time. The processes 

20 in the other subset of asynchronous processes, referred 
to herein as A-h-k-a, remain asynchronous and are 
scheduled by the run-time scheduler at run-time. The 
pre-run-time scheduler reserves processor capacity for 
A-h-k-a processes by adding the computation time of each 

25 A-h-k-a process to the computation time of every 

periodic process that has a greater latitude in meeting 
its deadline than that A-h-k-a process, to allow each A- 
h-k-a process to preempt the execution of any such 
periodic process if possible at run-time. 

30 Whether each asynchronous process is converted 

into a new periodic process or not, is determined based 
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on whether the ratio of the processor capacity that 
needs to be reserved for the new periodic process, to 
the processor capacity that needs to be reserved for the 
asynchronous process if unconverted, exceeds a user or 

5 otherwise specified threshold. 

In Step 2, the pre-run-time scheduler determines 
the schedulability of the set of all periodic processes 
with hard deadlines and known characteristics, referred 
to herein as P-h-k processes, which also include the new 

0 periodic processes converted from A-h-k-p processes. The 
pre-run-time scheduler constructs a pre-run-time 
schedule in which one or more time slots are reserved 
for the execution of every P-h-k process, including 
every new P-h-k process converted from an A-h-k-p 

5 process. The time slots reserved for each P-h-k process 
also include time reserved for the executions of all A- 
h-k-a processes that have less latitude in meeting their 
deadlines than that P-h-k process, and which may preempt 
the execution of that P-h-k process. The pre-run-time 

0 scheduler adjusts the lengths of the periods using for 
example user or otherwise specified parameters which 
control the balance between the utilization level and 
the length of the pre-run-time schedule. 

The pre-run-time scheduler is able to schedule 

5 periodic processes that have offsets, i.e., intervals 
between the start of a periodic process' first period 
and time zero. The pre-run-time scheduler takes 
advantage of any flexibility in periodic process offsets 
to increase schedulability. An embodiment of the 

0 present invention preferably allows the pre-run-time 
scheduler to use existing methods (including manual 



26 



methods) which statically schedule set of processes, to 
construct the pre -run- time schedule of periodic 
processes in Step 2 and in Step 4 (to be described 
below) , without requiring any change in the methods used 
5 in any of the other steps of the present invention. 
This allows the system and methods to have the 
flexibility to incorporate and take advantage of any 
future new static scheduling method for satisfying any 
additionally desired constraints among the most 

10 important and numerous type of processes in real-time 
applications, the periodic processes. 

The pre-run-time scheduler includes a function 
"adjustperiod" which uses a sorted list of reference 
periods to adjust the length of the period of each 

15 periodic process. Each reference period is equal to 2 1 
* 33 * 5 k * 7 1 * ll f , for some integers i, j, k, 1, f, 
... where 0 =< i =< exp 2 , 0 =< j =< exp 3 , 0 =< k =< exp 5 , 0 
=< 1 =< exp v , 0 =< f =< exp n , ... exp 2 , exp 3 , exp 5 , exp 7 , 
exp n , are the upperbounds on the exponents i, j, k, 

20 1, f, that are applied to the prime numbers 2, 3, 5, 
7, 11, .... Application dependent parameters are used to 
fine tune the exponent upperbounds which control the 
balance between the utilization level and the length of 
the pre-run-time schedule. 

25 In Step 3, the pre-run-time scheduler uses 

knowledge about the time slots reserved for the P-h-k 
processes in the pre-run-time schedule, to determine, 
before run-time, the worst-case response times of all A- 
h-k-a processes. The pre-run-time scheduler preferably 

30 uses one of two methods, one a formula, the other a 
simulation procedure, for determining the worst-case 
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response time of each A-h-k-a process. The pre-run-time 
scheduler verifies the schedulability of each A-h-k-a 
asynchronous process by checking whether its deadline is 
greater than or equal to its worst-case response time. 
5 Thus, the pre-run-time scheduler provides an a priori 
guarantee that all periodic and asynchronous processes 
with hard deadlines and known characteristics will 
always meet their deadlines. 

In Step 4, the pre-run-time scheduler determines 

10 the schedulability of all the periodic processes with 
soft deadlines and known characteristics, called P-s-k 
processes, under the condition that all the P-h-k 
processes and A-h-k-a processes that Ire guaranteed to 
be schedulable in the previous steps are 

15 still schedulable. The pre-run-time scheduler re- 
constructs the pre-run-time schedule in which one or 
more time slots are reserved for the execution of every 
P-h-k process (including every new P-h-k process 
converted from an A-h-k-p process), and for every P-s-k 

20 process. The time slots reserved for each P-h-k or P-s- 
k process also include time reserved for the executions 
of all A-h-k-a processes that have deadlines that are 
shorter than that P-h-k or P-s-k process' deadline, and 
which may preempt the execution of that P-h-k or P-s-k 

25 process. The pre-run-time scheduler uses the methods in 
the previous step that take into account knowledge about 
the time slots reserved for the P-h-k and P-s-k 
processes in the pre-run-time schedule to determine 
again, before run-time, 

30 the worst-case response times of every A-h-k-a process. 
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In Step 5, the pre-run-time scheduler preferably 
uses knowledge about the time slots reserved for the P- 
h-k and P-s-k processes in the pre-run-time schedule to 
determine, before run-time, the worst-case response 
5 times of asynchronous processes with soft deadlines and 
known characteristics, i.e., A-s-k processes. 

At the end of the pre-run-time phase, a feasible 
pre-run-time schedule for all the periodic processes 
with known characteristics should be constructed, while 
10 the worst-case response times of all the asynchronous 
processes with known characteristics should be 
determined. 

During the run-time phase, a run-time scheduler 
uses knowledge about the time slots reserved for the 

15 periodic processes in the pre-run-time schedule to 
schedule the executions of all the periodic and 
asynchronous processes, that is, the P-h-k processes 
(including every new P-h-k process converted from an A- 
h-k-p process), P-s-k processes, A-h-k-a processes, A-s- 

20 k processes, as 111 as asynchronous processes with soft 
deadlines and unknown characteristics (referred to 
herein as A-s-u processes, in a way that guarantees that 
every periodic process's execution will complete before 
the end of that periodic process's time slot in the pre- 

25 run-time schedule, and all the asynchronous processes 
with soft deadlines and known characteristics, are 
guaranteed to be completed within the worst-case 
response time pre-determined in Step 4 and Step 5 after 
their arrival, so that all the constraints and 

30 dependencies of all processes with known characteristics 
will always be satisfied. The run-time scheduler, can 



29 



use the information about the beginning times and end 
times of the time slots reserved for the execution of 
periodic processes (including those new periodic 
processes that were converted from asynchronous 
5 processes) in the pre-run-time schedule, as well as the 
a priori knowledge of the processes characteristics, to 
pre-compute major portions of the conditions that are 
used for decision making, hence the amount of 
computation that needs to be performed for scheduling 

10 purposes at run-time can be minimized. 

For example, the present invention makes it 
possible to create before run-time, a table of "safe 
starting time intervals" for each asynchronous process, 
and achieve lower run-time overhead than previous 

15 systems and methods by allowing the asynchronous 
processes to be scheduled by simple table lookup. 

A-s-u processes are scheduled at run-time on a 
"best-effort" basis using the remaining processor 
capacity. 

20 The present invention exploits to a maximum 

extent any knowledge about the characteristics that are 
available to the system both before run-time and during 
run-time, in order to: 

(a) effectively handle complex application constraints 
25 and dependencies between the real-time processes; 

(b) minimize run-time overhead; 

(c) maximize the chances of being able to guarantee that 
all the processes with hard deadlines will always meet 
their deadlines; 
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(d) provide firm and tight response time guarantees for 
all the processes whose characteristics are known before 
run-time; and 

(e) make it easier to verify that all timing constraints 
5 and dependencies will always be satisfied. 

It is believed that as compared with previous 

systems 

and methods that perform all scheduling activities at 
run-time, for most real-time applications, the present 

0 invention is better suited to meeting the above for the 
following reasons: 

(1) In most real-time applications the bulk of 
the computation is usually performed by periodic 
processes for which the characteristics are known a 

5 priori. Complex constraints and dependencies are 
normally defined on the periodic processes. In the 
present invention, all the periodic processes are 
scheduled before run-time, there is practically no limit 
on the time that can be used for scheduling the periodic 

0 processes. This allows the use of better methods to 
handle a great variety of application constraints and 
dependencies, and thus can achieve higher schedulability 
for the most important and most numerous type of 
processes in real-time applications. 

5 (2) The run-time overhead required for 

scheduling and context switching is much smaller than 
that of the prior art. 

(3) The number of asynchronous processes that 

the 

0 run-time scheduler needs to schedule should be small, 
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as in most real-time applications. In most real-time 
applications 

the number of asynchronous processes with hard deadlines 
is usually small. 

5 (4) A significant portion of asynchronous 

processes 

can be transformed into periodic processes, if desired 
by the user, when using the present invention. For 
those asynchronous processes that are not transformed 
10 into periodic processes, their interarrival times are 
likely to be long. 

(5) Most of the important scheduling decisions 
have already been determined before run-time. In 
particular, the relative ordering of all the periodic 

15 processes was determined before run-time when the pre- 
run-time schedule was computed. 

(6) A significant portion of the parameters used 
by the run-time scheduler to make scheduling decisions 
for asynchronous processes, are known before run-time, 

20 so that major portions of the conditions that are used 
for decision making can be pre-computed, and the amount 
of computation that needs to be performed for scheduling 
asynchronous processes at run-time can be minimized. 

(7) From the pre-run-time schedule, it becomes 
25 known in advance exactly which periodic process may 

preempt which other periodic process at run-time. Thus 
one can use this information to minimize the amount of 
context switching. 

(8) Once the pre-run-time schedule has been 

30 determined for all the periodic processes, the run-time 
scheduler can use this knowledge to achieve higher 
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schedulability for the small number of asynchronous 
processes that needs to be scheduled at run-time. 

(9) The run-time scheduler can use knowledge 
about the pre-run-time schedule to schedule asynchronous 

5 processes more efficiently, e.g., it would be possible 
to completely avoid blocking of a periodic process with 
less latitude in meeting its deadline by an asynchronous 
process with greater latitude. 

(10) When determining the worst-case response 
10 times of asynchronous processes, overly pessimistic 

assumptions need not be made, e.g., it need not be 
assumed that for each process, all the periodic 
processes with less latitude in meeting their deadlines 
can arrive at the same time to delay that process. Thus 
15 tighter worst-case response times for asynchronous 
processes can be achieved. 

(11) Using the present invention, verifying that 
all timing constraints will always be satisfied is much 
easier, 

20 (12) Using the present invention, it becomes 

straightforward to verify that all the timing 
constraints and dependencies between the periodic 
processes are satisfied in a pre-run-time schedule. 

(13) When using the technique of pre-run-time 

25 scheduling, timing constraints and dependencies are 

directly "embedded" in the pre-run-time schedule, thus 
for the majority of the processes, the use of 
complicated run-time synchronization mechanisms for 
which it is often extremely difficult to obtain 

30 reasonable and accurate execution time bounds , can be 
avoided. 
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(14) The number of asynchronous processes is 
reduced f and the ordering of the periodic processes is 
fixed in the pre-run-time schedule. This significantly 
reduces the complexity of verifying that the 
5 asynchronous processes will meet timing constraints. 

In accordance with another embodiment of the 
invention, a 

method of scheduling executions of both periodic and 
asynchronous real-time processes having hard or soft 

10 deadlines, comprises automatically generating a pre-run- 
time schedule comprising mapping from a specified set of 
periodic process executions to a sequence of time slots 
on a time axis, each of the time slots having a 
beginning time and an end time, reserving each one of 

15 the time slots for execution of one of the periodic 
processes, a difference between the end time and the 
beginning time of each of the time slots being 
sufficiently long that execution of all of the periodic 
processes, including satisfaction of predetermined 

20 constraints and relations comprising at least one of 
release time, worst-case computation time, period, 
deadline, deadline nature, offset and permitted range of 
offset constraints, and precedence and exclusion 
relations and criticality levels can be completed 

25 between the beginning time and end time of respective 
time slots, and executing the processes in accordance 
with the schedule during run-time of the processor. 

In accordance with another embodiment, a method 
for automatically adjusting lengths of periods of a 

30 predetermined set of periodic processes, comprises 

storing and sorting a list of reference periods, setting 



34 



the length of the period of each periodic process to the 
length of the largest reference period that is no larger 
than an original period of the periodic process to form 
adjusted periods, and storing the adjusted periods for 
5 subsequent use in scheduling executions of the periodic 
processes . 

In accordance with another embodiment, a method 
of processing a plurality of processes, some of which 
are periodic and some of which are asynchronous, 
10 comprises: 

(i) prior to executing the processes on a processor: 

(a) determining which asynchronous processes 
have less flexibility in meeting their deadlines than 
any of the periodic processes, 
15 (b) adding the execution time of each of the 

less flexible asynchronous processes to the execution 
time of each of the periodic periodic processes, 

(c) scheduling each of the periodic processes 
into time slots, 

20 (ii) and during run-time of the processor: 

(d) executing the periodic processes according 
to the schedule, interrupting any periodic process to 
execute an of said less flexible asynchronous processes 
for which a request to execute has been received by the 

25 processor, 

(e) on receiving a request to execute an 
asynchronous process which has greater or equal 
flexibility in meeting their deadlines than any of the 
periodic processes, scheduling the requesting 

30 asynchronous process at a time which will not conflict 
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with execution and completion of any of the periodic 
processes, and 

(f) executing the scheduled latter asynchronous 
process at its scheduled time, 
5 In accordance with another embodiment, a method 

of processing a plurality of processes, some of which 
are periodic and some of which are asynchronous, 
comprises : 

(i) prior to executing the processes: 

10 (a) determining which asynchronous processes 

have less flexibility in meeting their deadlines than 
any of the periodic processes, 

(b) adding the execution time of each of the 
less flexible asynchronous processes to the execution 

15 time of each of the periodic processes, 

(c) scheduling each of the periodic processes 
into time slots, 

(d) converting each asynchronous process which 
has greater or equal flexibility in meeting their 

20 deadlines than any of the periodic processes into a new 
periodic process, and scheduling the new periodic 
process at a time which will not conflict with execution 
and completion of any of the other periodic processes, 

(ii) and during run-time, 

25 (e) executing the periodic and new periodic 

processes, interrupting any of the periodic and new 
periodic processes to process any of the less flexible 
asynchronous processes for which a request to execute ■ 
may be received at any time. 
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In accordance with another embodiment, a method 
of scheduling execution of processes by a processor 
comprises : 

(a) scheduling periodic time slots for all periodic 

5 processes which time slots each include time for each of 
the periodic processes and time for all asynchronous 
processes which have less flexibility in meeting their 
deadlines than do the periodic processes, 

(b) determining worst case response times of all 
10 other processes, 

(c) construct a schedule which includes the periodic 
time slots and sufficient intervening time to process 
said all other processes, and 

(d) executing the processes in accordance with the 

15 schedule and as said all other processes are required to 
be processed from time to time. 
BRIEF INTRODUCTION TO THE DRAWINGS 

A better understanding of the invention may be 
obtained by reading the detailed description of the 
20 invention below, in conjunction with the following 
drawings, in which: 

Figure 1 is a feasibility schedule for an 
embodiment of the invention, 

Figure 2 is a timing diagram of possible run- 
25 time execution of certain asynchronous and periodic 
processes, 

Figures 3 and 8 are feasibility schedules for 
other embodiments of the invention, 

Figures 4, 5, 6, 7 and 9 are timing diagrams of 
30 possible run-time execution of other asynchronous and 
periodic processes, 
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Figures 10, 11 12 and 13 are example timing 
diagrams of possible run-time execution of various 
periodic processes, 

Figure 14 is another example of a feasibility 
5 schedule, Figure 15, 16 and 17 are example timing 
diagrams of possible run-time execution of various 
periodic processes, 

Figure 18 is another example of a feasibility 
schedule, 

10 Figure 19 is another example of a pre-run-time 

schedule, 

Figures 20A - 2 OH are timing diagrams used in 
the explanation of various example cases, 

Figure 21 is a timing diagram of a feasible 
15 schedule on two processors, 

Figures 22 and 23 are timing diagrams of pre- 
run-time schedulers, on two processors, and 

Figures 24 and 24A are block diagrams of systems 
on which the present invention can be carried out. 

20 DETAILED DESCRIPTION OF PREFERRED EMBODIMENTS OF THE 
INVENTION 

Example embodiments will now be given which 
illustrate operation and advantages of the present 
invention as compared with systems and methods that 

25 perform all scheduling activities at run-time. It 

should be noted that existing systems and methods that 
perform all scheduling activities at run-time are not 
able to guarantee the schedulability of the set of 
processes given in these examples. Some of the 

30 embodiments will be described in pseudocode, which is a 
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shorthand form of English understandable to persons 
skilled in the field of this invention. 
Periodic Processes 

A periodic process consists of a computation 
that is executed repeatedly, once in each fixed period 
of time. A typical use of periodic processes is to read 
sensor data and update the current state of internal 
variables and outputs. 

A periodic process p can be described by a 
quintuple (o p/ r p , c p/ d p/ prd p ) , wherein prd p is the 
period, c p is the worse case computation time required 
by process p, d p is the deadline, i.e., the duration of 
the time interval between the beginning of a period and 
the time by which an execution of process p must be 
completed in each period, r p is the release time, i.e., 
the duration of the time interval between the beginning 
of a period and the earliest time that an execution of 
process p can be started in each period, and o p is the 
offset, i.e., the duration of the time interval between 
the beginning of the first period and time 0. 

It is assumed that o P/ r P/ c p , d P/ prd p as well as 
any other parameters expressed in time have integer 
values. A periodic process p can have an infinite 
number of periodic process executions} p Q , Pi, P2, ••-/ 
with one process execution for each period. For the ith 
process execution pi corresponding to the ith period, 
pi's release time is R P i = o p + r p + prd p x (i-1); and 
pi's deadline is D pi = o p + d p + prd p x (i-1). The 
uppercase letters R and D in R p and D p are used herein 
to denote the release time and deadline respectively of 
a periodic process execution of some periodic process p. 
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Reference is made to Figure 11 and Figure 12 for 
examples of periodic processes. Figure 11 illustrates 
the periodic process p B = o pB , r pB , c pB , d pB , prd pB where 
r pB = 1, d pB = e, d pB = 4, prd pB = 12 and o pB = 0 . Figure 
12 illustrates the periodic process p D = o pC , r pC , c pC , 
d pc , prd p c where r pC = 0, c pC = 4, d pC = 4, prd pC = 12 and 
o pC = 7. 

Asynchronous Processes 

An example of an asynchronous process is one 
which consists of a computation that responds to 
internal or external events. A typical use of an 
asynchronous process is to respond to operator requests. 
Although the precise request times for executions of an 
asynchronous process a are not known in advance, usually 
the minimum amount of time between two consecutive 
requests min a is known in advance. An asynchronous 
process a can be described by a triple (c a , d a , min a ) . c a 
is the worse case computation time required by process 
a. da is the deadline, i.e., the duration of the time 
interval between the time when a request is made for 
process a and the time by which an execution of process 
a must be completed. An asynchronous process a can have 
an infinite number of asynchronous process executions 
a 0 , ai, a 2 , with one process execution for each 

25 asynchronous request. For the i th asynchronous process 
execution a ± which corresponds to the i th request, if 
ai's request (arrival) time is R ai , then ai's deadline is 
Dai = R ai + cU. 

The uppercase letters R and D in R a and D a will 
be used herein to denote the request (arrival) time and 
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deadline respectively of an asynchronous process 
execution of some asynchronous process a. 
Schedules 

If a periodic process p or an asynchronous 
5 process a has a computation time of c p or c a , then it is 
assumed that that process execution p± or a± is composed 
of c p or c a process execution units. Each processor is 
associated with a processor time axis starting from 0 
and is divided into a sequence of processor time units. 

10 A schedule is a mapping from a possibly infinite 

set of process execution units to a possibly infinite 
set of processor time units on one or more processor 
time axes. The number of processor time units between 0 
and the processor time unit that is mapped to by the 

15 first unit in a process execution is called the start 
time of that process execution. The number of time 
units between 0 and the time unit subsequent to the 
processor time unit mapped to by the last unit in a 
process execution is called the completion time of that 

20 process execution. A feasible schedule is a schedule in 
which the start time of every process execution is 
greater than or equal to that process execution's 
release time or request time, and its completion time is 
less than or equal to that process execution's deadline. 

25 Reference is made to Figures 1-9, 14 and 18 are 

examples of feasible schedules, wherein the horizontal 
axis is the time axis, and time period segments are 
separated by vertical lines which represent release 
times and deadlines, as will be described below. 

30 It should be noted that, in order to avoid use 

in this specification of an exceedingly large number of 
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repetitions of use of the word "executions of process" 
or "executions of process i", these terms have been in 
many places herein abbreviated to the word "process", or 
to simply "i". Thus whenever there is a reference to 
5 the term "process" as related to a schedule, the term 
"process" or "process i", or "i" when i is the name of a 
process should be understood as meaning "process 
execution" or "the execution of process I". 
Process Segments 
10 Each process p may consist of a finite sequence of 
segments 

p(0), p(l), . p(n(p)), where p(0) is the first 
segment and p(n(p)) is the last segment in process p. 
Given the release time r p/ deadline d p of process p and 
15 the computation time of each segment p ± in process p, 

one can easily compute the release time and deadline for 
each segment, as described in the aforenoted 1993 
article by Xu and Parnas. 

Parallel computations can be represented by 

20 several 

processes, with various types of relations defined 

between individual segments belonging to different 

processes, and processes can be executed concurrently; 

thus requiring each process to be a sequence of segments 
25 does not pose any significant restrictions on the amount 

of parallelism that can be expressed. 

Precedence and Exclusion Relations 

Various types of relations such as precedence 

relations and exclusion relations may exist between 
30 ordered pairs of processes segments. A process segment 

i is said to precede another process segment j if j can 
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only start execution after i has completed its 
computation. Precedence relations may exist between 
process segments when some process segments require 
information that is produced by other process segments. 
5 A process segment i is said to exclude another 

process segment j if no execution of j can occur between 
the time that i starts its computation and the time that 
i completes its computation. Exclusion relations may 
exist between process segments when some process 
10 segments must prevent simultaneous access to shared 

resources such as data and I/O devices by other process 
segments . 

Latitude of a Process 

The "latitude" of a process x, denoted by L x , is 

15 a user 

defined measure of the latitude in meeting process x's 
deadline. 

For exemplary purposes, in all the examples given in the 
description of the present invention, I will assume that 
20 for each process x, L x is set to the following value: 
for each periodic process p ± , L pi = d pi - r pi 
for each asynchronous process a±, L ai = d ai 
It should be noted that L x can be defined 
differently 

25 according to some other criteria, depending on the 
application. 

(For example, for each P-h-k process or P-s-k process 
Pi, instead of defining L pi - d pi - r pi , L pi = d pi could be 
defined, or any other criteria for defining L pi could be 
30 used. 

Main Types of Processes 
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The main types of processes that are considered 
herein are the following: 

Set P-h-k: Periodic processes with hard 
deadlines and known characteristics. Each such process 
5 may consist of one or more segments, with precedence 

relations defined on them to enforce the proper ordering 
of segments belonging to the same process. It is 
assumed that the following characteristics 
are known for each such process segment before run-time: 
10 — period, 

— worst-case execution time, 

— release time, 

— deadline, 

— the set of data that each segment reads and 
15 writes, 

any exclusion relationships with other process 
segments, 

— any precedence relationships with other periodic 
process segments. 

20 Set A-h-k: Asynchronous processes with hard 

deadlines and known characteristics. It is assumed that 
each such process consists of a single segment and the 
following are known for each such process before run- 
time: 

25 — deadline, 

— worst-case execution time, 

minimum time between two consecutive requests, 

— the set of data that the process reads and 
writes, 

30 — an y exclusion relationships with other process 

segments. 
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Set P-s-k: Periodic processes with soft 
deadlines and known characteristics. Each such process 
consists of one or more segments , with precedence 
relations defined on them to enforce the proper ordering 
5 of segments belonging to the same process. It is 
assumed that the following are known for each such 
process before run-time: 

— period, 

— worst-case execution time, 
10 — release time, 

— deadline, 

— the set of data that the process reads and 
writes, 

-- any exclusion relationships with other process 
15 segments, 

— any precedence relationships with other periodic 
process segments. 

Set A-s-k: Asynchronous processes with soft 
deadlines and known characteristics. It is assumed that 
20 each such process consists of a single segment and the 
following are known for each such process before run- 
time : 

— deadline, 

— worst-case execution time, 

25 — the set of data that the process reads and 

writes, 

— any exclusion relationships with other process 
segments . 

Set A-s-u: Asynchronous processes with soft 
30 deadlines and unknown characteristics. It is assumed 
that each such process consists of a single segment and 
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nothing else is known about each such process before 
run -time. 

In the present invention, as well as in the 
method described in the 1993 article by Xu and Parnas 
5 referred to above, and that can be used in the present 
invention, It is assumed that the basic scheduling unit 
is a segment. The terms "segment" and "process will 
also be considered as having the same meaning. 

10 Pre-Run-Time Phase 

Step 1: Conversion of A-h-k-p processes 

In this step asynchronous processes with hard- 
deadlines and known characteristics are referred to as 
A-h-k processes. The A-h-k processes are divided into 

15 two subsets. Different methods will be used to reserve 
processor capacity for the execution of the processes in 
each of the two subsets. 

The processes in one of subsets, called A-h-k-p 
processes, 

20 should be converted into equivalent new periodic 

processes with hard deadlines. The remaining A-h-k 
processes are called A-h-k-a processes and processor 
capacity should be reserved for their execution before 
run -time. 

25 For each A-h-k-a process, processor capacity in 

each hard-deadline periodic process should be reserved 
by the following. 

Let S P be the original set of P-h-k processes; 
Let S A be the original set of A-h-k processes; 
30 Let S a be the set of A-h-k processes that have not been 
converted into periodic processes; 



46 



Let S p be the set of new periodic processes that Ire 
converted from A-h-k-p processes. 

For each p T e (S P u S p ) , calculate its "adjusted 
computation time" c pi as follows. 
5 Cpi 1 = Cpi + adjusted capacity (pi) 

The exact adjusted capacity function that is 
used depends on the application characteristics: for 
example it may depend on the number of processors that 
are used, and other factors. 
10 In the examples, we will assume that the 

following simple formula is used: 

Adjusted capacity (pi) = 

Above, for each process p ± in S p (the original 
set of P-h-k processes) or in S p (the new periodic 
processes converted from A-h-k-p processes), for every 
20 possible occurrence of any A-h-k-a process a 3 between r pi 
and dpi, if L aj < L pi then aj T s computation time is added 
to pi T s computation time. 
Example 1 . 

Assume 4 asynchronous processes with hard 
25 deadlines and known characteristics (A-h-k processes), 
and 4 periodic processes with hard deadlines and known 
characteristics (P-h-k processes) as follows, 
dnewpi = c ai + conversion room(ai) ; 
The exact conversion room function that is used 
30 depends on the application characteristics. 
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In the following two examples, first assume 
the following simple formula is used. 

Conversion room(xi) = 



cm: 




= %d ao = 


2,™^ = 1,000; 






ai: 


c ai 


- 2, d ai = 


7,mm ai = 1,000; 
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= l0,d a2 -- 


= 239, min a2 = 1,000; 
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= 0; 
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= 30, Cp 5 = 


= 16,rf P5 = 50,pr4, 5 = 


200, o n 


= 0; 






= 0,cp 6 = 


26,dp 6 = 200,prd P6 = 


200, o P6 


= 0; 


Pr' 


T pr 


= 0,Cp 7 = 


16, d P7 =200, prdp 7 = 


200, o P7 


= 0. 



The adjusted computation times for p 4 ,p 5 ,p 6 ,p 7 will respectively be: 

Cp4 = Cp4 + Coo + c at = 26 + 2 + 2 = 30; 

Cp*' = Cps +c ao + c ai = 16 + 2 + 2 = 20; 

V = Cpe + Cao + c Q , = 26 + 2 + 2 = 30; 

Cp/ = Cp 7 + c ao + c ol = 16 + 2 + 2 = 2o! 
□ 



48 



One technique for converting an asynchronous 
process into an equivalent periodic process is described 

5 in the aforenoted 1983 article by Moka in which an 

asynchronous process (c a , d a , min a ) can be converted into 
a periodic process (o p , r p , c p , d p/ prd p ) which satisfies 
the following conditions: c p = c a , d a => d p => c a , prd p =< 
min(d a - d p + 1, min a ) , r p = 0, o p = 0. 

10 However, as noted earlier, the technique 

described by Moka did not consider the case of non-zero 
offsets, that is, non-zero length intervals between time 
zero and the beginning of periods of the converted 
periodic processes. 

15 As will be described below, the present 

invention extends this technique to allow non-zero 
offsets. In particular, when an asynchronous process 
(Car d a/ min a ) is converted into a periodic process (o p , 
£p/ c p , d p , prdp) , if it satisfies the following 

20 conditions: c p = c a , d a => d p => c a , prd p =< min(d a - d p + 
1, min a ) , r p = 0, the converted periodic process is 
allowed to have offsets that range from 0 to prd p - 1: 
o p =< (prdp - 1) . 

By using non-zero offsets, one increases 

25 considerably the chances of satisfying all the given 
timing constraints. 

Furthermore, the technique described by Moka 
only deals with one process. When more than one process 
must be converted into periodic processes, the new 

30 periodic processes may have timing conflicts with each 
other and with the original set of asynchronous and 
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periodic processes. For example, a direct application 
of the Moka technique could result in more than one 
periodic process each having a release time of zero and 
a deadline equal to the computation time. 

5 In order to avoid such timing conflicts, in 

accordance with an embodiment of the present invention a 
procedure is used for converting a set of asynchronous 
processes into periodic processes, which also takes into 
account the possibility 

10 of timing conflicts with other existing asynchronous and 
periodic processes. 

First, a procedure is introduced that converts a 

single 

asynchronous process ai into a corresponding new 
15 periodic process "newpi". When determining newpi's 

deadline d neW pi, "room" (time) is left for all the hard 
deadline processes that have a shorter or equal deadline 
than that process's deadline, as follows: 



« 6 «H^ aie ^4^, A J min a] 1 Ca 



In the above relationship, the deadline of the 
new periodic process d newp i appears on both the left-hand 

25 side and right-hand side thereof. The value of d ne wpi as 
well as all other parameters of the new periodic process 
can be found with the following procedure for converting 
a single asynchronous process a± = (c ai , d ai , min ai <= S a 
into a periodic Process newp ± - (o neW pi, r newp i/ c ne wpi/ 

30 d new pi, prd neW pi) e S p : 
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failure:= false; 

dnewpi := c 0i + conver sianjroom{a^)\ 
deadlinefound:= false; 

while not(deadlinefound) and not (failure) do 
begin 

dpreviousi- = dnewpil 

dnewpi — °ai + conversion jroom(previouSi): 
if ^previous* = d newVi then deadlinefound:= true; 
if (d^ - dnewpi + 1) < min^ 
then 

Wdnewpi' = {dai ~ d newpi + 1) 

else 

1 5 Wdnewpi := adjustperiod(pr d netypi ) ; 

{perform any necessary adjustments to prc^p.} 
dnewi'~ d ai P^d neW p i + 1; 

then failure:= true 
else if deadlinefound 
then 
begin 

S p := 5 P U {net^pj}; 
S«:=S«-{ai}; 

end; 

end 



25 



20 



30 
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5 If it is assumed that the earliest time that 

asynchronous process ai can make a request for execution 
is time t, then the range of the offset o neW pi is (0, t + 
prd n ewpi - 1) . 

Reference is made to Figures 10 and 13 for 

10 examples of conversion of an asynchronous process into a 
periodic process. 

In Figure 10, the periodic process newp A = (0 neW pA, 
^newpA, C new p A/ dnewpA, p£"d neW pA translated from the asynchronous 
process a A = (c aA , d aA , min aA ) = (2,7,8), where r ne wpa = 

15 0,c ne wpA = c a A = 2, d neW pA = c aA = 2, prd new pA - min (d aA - 
dnewpA + 1/ minaA) = min(7-2+l,8) = 6,0=<0 ne wpA = 0,=< 
prd newpA -1 = 5. If the offset of periodic process newp A 
is set to 0, i.e. onewp A , then the periodic process 
executions newp A0 , newp A i, newp A 2/ newp A3 , newp A4 , newp A5 ... 

20 start at the times 0, 6, 12, 18, 24, 30,... respectively, 
and if the asynchronous request times R a0 , RaAi, RaA2 are 
1, 9, 17, 27, then the asynchronous process executions 
^ao/ a A i, a A2 , a A3 start at the times 6, 12, 18, 30 
respectively. A A o executes in the time slot of newp Ai , 

25 a A i executes in the time slot of newp A 2, a A 2 executes in 
the time slot of newp A3 , and a A3 executes in the time 
slot of newp A5 . 

In Figure 13, the periodic process newp A = (OnewpA, 

^newpA, CnewpA, d new p A/ 

prd^wpA translated from the asynchronous 
30 process a R = { CaRr daA, min aA ) = (2,7,8), where r newp a = 
0,c neW pA = c^ = 2, d neW pA = c aA = 2, prd new pA = min (daA - 
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dnewpA + l,min aA ) = min ( 7 -2+1 , 8 ) = 6 r 0=<0 neW pA = 0,=< 
prd n ewpA -1 = 5. If the offset of periodic process newp A 
is set to 5, the periodic process executions newp A0/ 
newp A i, newp A2/ newp A3 , newp A4/ newp A5 ... start at the times 
5 5, 11, 17, 23, 29, 35,..., and if the asynchronous always 
makes requests at the earliest possible time and at the 
highest possible rate, the first five asynchronous 
request times R a0 , R aAi , R aA2 R aA 3, R aA 4 are 0, 8, 16, 24, 
32, then tha asynchronous process executions a A o, a A i, 

10 a A2 , a A3 start at the times 5, 11, 17, 29, 35 

respectively. A A0 executes in the time slot of newp Ai , 
a Ai executes in the time slot of newp A2/ a A2 executes in 
the time slot of newp A2 , and a A3 executes in the time 
slot of newp A3 , a A4 executes in the time slot of newp A4 , 

15 and a A5 executes in the time slot of newp A5 , etc. 

In some cases, when the lengths of periods are 
relatively prime, the length of the LCM of the periods 
could become inconveniently long. A function 
"adjustperiod" can be used to adjust prd newp i, whenever 

20 the LCM became inconveniently long. 

(See Example A below and Figures 15 and 16 for 
an example of the use of the adjustperiod Procedure) . 
The adjust period function will be described below in 
the section related to construction of a feasible pre- 

25 run-time schedule for the P-h_k processes. 



Example 2 



Assuming that in addition to the processes in 
30 Example 1 above, the following A-h-k process: 
A=: c a3 - 10, d a3 = 114, min a3 = 114. 
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If the procedure above is used to convert a 3 into 

a 

periodic process new p3 , prior to entering the while 
loop f 

5 d newp 3 = c a3 + c p5 + c a0 + c a i = 10 + 16 + 2 + 2 = 30. 
In the first iteration of the 
while loop, d_{ previous} = d__{newp_3} = 30; 
d__{newp_3} = c__{a_3} + c_{a_0} + c_{a_l} 
- 10 + 2 + 2 = 14. 
10 Since d pre vious ^ newp3, deadlinef ound = false. 

In the second iteration of the while loop, 
dprevious = d neW p3 = 14; d neW p3 = c a3 + c a o + C a i = 10 + 2 + 2 = 
14. 

Since d pre vious = d new p3/ deadlinef ound = true, 
15 prd newp3 = (d a3 - d newp 3 + 1) = 114 - 14 + 1 = 100. 

If we use the adjustperiod function and 
select_exp_upperbounds procedure described herein with 
reference to constructing a feasible pre-run-time 
schedule for the P-h-k processes to adjest the period 
20 prd newp3 , by using prd max = prd p4 = 200, and the following 
initial exponent upperbound values: exp2i nit = 5, exp3 in i t 
= 3, expSinit = 2, exp7 init = 0, and use the value 24 for 
the parameters C m , C m n, C m 7, Cms, C m3/ and Cd, Cd7, C d 5, C d 3, 
C d2 and the value 0 for C e 7/ C e 5/ C e3 , C e2 and the value 0 
25 for C elf C e 5, C e3 , C e 2/ and the values 0, 1, 2 for C e s7/ 

C e3 s, C e2 3r respectively, then the select_exp_upperbounds 
procedure will produce the following values for the 
exponent uperbounds: 

exp2 = 5, exp3 = 3, exp5 = 2, exp7 = 0, expll = 

30 0. 
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After the generate_refprd procedure has used the 
above exponent upperbounds to compute the sorted list of 
reference periods in refprd, the adjustperiod function 
will use the sorted list of reference periods to compute 
5 the following adjusted period: 

prd newp3 = adjustperiod(prd newp3 ) = 
adjustperiod(lOl) = 100; 

dnewps = d a3 - prd newp3 + 1 = 114 - 100 + 1 = 15. 

The permitted range of newp 3 T s offset is 0 =< 
3-0 o newp3 - 1 = 0 + 100 - 1 = 99. 

In examples 1 - 7, it will be assumed that all 
the periodic process periods are adjusted using the 
adjustperiod function with exactly the same parameters 
as used for adjusting newp 3 T s period. 

15 

The criterion for determining whether an A-h-k 
process should be converted into a periodic process or 
remain asynchronous, is based on whether the ratio of 
the processor capacity that needs to be reserved for the 

20 new periodic process, to the processor capacity that 
needs to be reserved for the asynchronous process, if 
unconverted, exceeds a user specified threshold. 

For each A-h-k-p process a 3 that is converted 
into a new periodic process n ewpj , the reserved processor 

25 capacity (RPC) in the pre-run-time schedule can be 
calculated with the following relation: 

R^Cnewpj — C newp j/prd newp j 

For each A-h-k-a process a 3 that remains 
asynchronous, the reserved processor capacity (RPC) in 
30 the pre-run-time schedule can be calculated with the 
following formula: 
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In general if an asynchronous process has a long 
minimum time between consecutive requests, then that 
asynchronous process is more likely to require less 
processor capacity to be reserved if it is treated as an 
10 A-h-k-a process compared with treating it as an A-h-k-p 
process . 

A procedure for converting a set of asynchronous 
processes 

{<c ai , d ai , rain ai ) | i = 0, 1, n} c S A into a set of 

15 periodic processes S p = { (o P i, r pi/ c P i, d pi , prd p i) I i 

0, 1, n} follows: 

S P : = original set of P-h-k processes; 

S A : = original set of A-h-k processes; 

S a : — s A ; 
20 S p : = emptyset; 

numof changes : = 0 ; 

changes := true; 

while (changes) and (numof changes < someupper limit ) do 
begin 

25 changes := false; 

begin 

for each aj e S A , in the order of increasing 
deadlines do 
30 begin 
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The procedure described earlier should be used 
to tentatively convert each A-h-k asynchronous process 
aj e S A into a new periodic process newpj e S p with the 
same index. Note that this conversion depends not only 
on a jf but also on the entire set of new periodic 
processes in S p , the original set of P-h-k processes in 
S P , and the set of A-h-k-a processes in S a } 

newpf- Tentatively .convert into _aew_periodic_process(a i) S Pi S P , S a ) 

if {dnewpj < d aj ) and {prd 7UgwPi > dnew Pj ) 

then 

begin 

Cnewp/ ~ Cnewpj + adjusted .capacity (newpj): 

RPC newp -\ = Cnewp/ / P^d neW p^\ 

nru aj .~ {L Pi z( Sp us P )AL aj <L Pi — ^ — j + 
if ihreshold{a 5 ) *RPC newpj < RPC aj 
then 
begin 

if {newpj } g S p 

{or if the version of newpj in S p is different 

from the newly converted version of newpj } 

then 

begin 

changes— true; 

S p := S p U {newpj }; 

{add new periodic process newpj 

converted from a 5 to the periodic set S p , 

replacing any older version of newpj in S p } 

end; 

if {aj } G S a then 
S a '— S a - { aj }; 

{remove aj from asynchronous set S a } 

end 

else {threshold(aj) *RPC newpj > RPC a .} 
begin 

if {aj } g S a then 

begin 
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changes:— true; 

S a := S a U {aj }; 

{add cij to asynchronous set S a } 

end; 

if {newpj } 6 S v then 
S v \— S p - { ne^pj }; 
{remove pj from periodic set S v } 

end; 

end; 

end; 

for each aj E 5a, in the order of decreasing deadlines do 
begin 

(repeat the same procedure that was done in the order of 
increasing deadlines for each a,j 6 Sa above) 

end; 

if changes then 

numofchanges:= numofchanges + 1; 

end; 

end; 

15 

At the end of the procedure, the final set of A- 
h-k-a processes is S a and the final set of new periodic 
processes converted from A-h-k-p processes is S p . 

Above, the range of the offset for each new 
20 periodic process newpi, o ne wpi is (0, newp^J. The user can 
decrease or increase each "threshold (aj ) " value in the 
procedure above, to increase or decrease the likelihood 
that each A-h-k process a 3 will be converted into a P-h- 
k process, depending on the application requirements. 
25 Setting the threshold value of a certain asynchronous 
process to a high value so that it is unlikely to be 
converted into a new periodic process, may in some cases 
increase the schedulability of that process; in other 
cases converting an asynchronous process into a periodic 
30 process may increase schedulability (see example 14); 
but increasing schedulability may not be the only 
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objective in a particular application. In some cases, 
one may prefer that a certain A-h-, process should be 
converted into a new periodic process whenever possible, 
to reduce scheduling overhead and/or simplify the timing 
5 analysis and make it easier to predict the system 1 s 
behavior . 



Example 3 

Assuming that the threshold value for each A-h-k 
10 process is set as follows: threshold (a 0 ) = 10, 

threshold (ai) = 10, threshold (a 2 ) = 1, threshold (a 3 ) = 
2.5, threshold (a 9 ) = 1, the procedure above will 
determine the following for each of the processes in 
Examples 1 and 2 : 



dnewpo = 2; prdnwvo < min{d ao - d^ WVQ + 1, rmn« 0 ) =2-2+1=1 < Cn ewpo = 2 

oo will NOT be converted into a new periodic process and will remain asynchronous 

and belong to the set A-h-k-a. 

cC* - c ai ^d^Jmin^ = 2 + [4/1000]2 = 4 
prdnewpx = min(d ai - d newpi + l T rnin ai ) = 7- 4+1-4 

RPCnewpi = Cnewpi / Wdnewpi = ^ 

RPC ai = [(dne^ - r newP3 )/min^\ cjprd^^ + \{d Pi - r P4 )/min ai ] Cajprd^ 
+\{d P5 ~ r P5 )/rmn ai ~\ Cajprdp, +f{d po - r P6 )/min ai '\ c a Jprd Pfi +\{d P7 - r^/min^] 

+c a JrrSn ai = 2/100 + 2/200 + 2/200 + 2/200 + 2/200 + 2/1000 
= 0.062 < threshold^) * RPC newpi = 10 * 1 = 10 

a,i will NOT be converted into a periodic process, and will remain asynchronous and 
belong to the set A-h-k-a. 

dnew P3 = c a3 +\d n ew P Jmin ao \c ao +\d newpz /min ai ~]c ai = 10 + [30/1000]2 + [30/100012 
= 14 

prd newj>3 = min(d as - d nexBpz + 1, min az ) = 114 - 14 + 1 = 101 
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After the adjustperiod function is applied (see Example 2): 
prdnewp 3 — adjustperiod(lQi) = 100; 
d newpz = d a3 - prd newp3 + 1 = 114 - 100 + 1 = 15; 
RPC newp3 = Cnewps /prd newp3 = 14/100 = 0.14; 

RPC a3 = \(d n -r P4 )/min a3 ] c a Jprd P4 +\(d P6 - r P6 )/mm 03 ] c 03 /prrfp a 

+[(^7 - rpj/mirias] c a Jvrdp 7 +c a3 /min a3 = 20/200 + 20/200 + 20/200 + 10/113 = 

0.388 > threshold(a 3 ) * RPC^^ = 2.5 * 0.14 = 0.35 

a 3 will be converted into anew periodic process newpz - (r newps , Cnew P3 , dnewp 3 ,prdn ewp3 ) 
= (0, 10, 14, 100). 
a 2 : 

+ \dnew Pi /prd P5 ]c pn = 10 + [40/1000] 2 + [40/1000] 2 + [40/100] 10 + [40/200] 16 = 
40 

prdnew P2 = min(d a2 - d newp2 + 1, min a2 ) = 239 - 40 + 1 = 200 
RPCnewpi = Cnewpi lprd newp2 = 14/200 = 0.07 

RPC a2 = c a Jmin a2 = 10/1000 = 0.01 < threshold(a 2 ) * RPC newp2 = 1 * 0.07 = 0.07 
a 2 will NOT be converted into a periodic process, and will remain asynchronous and 
belong to the set A-h-k-a. 
a 9 : 

^newpg ~ Gag ^Idnewpg/^^aol^ao \^newpg/'^^ai\ + [^netupg A^^as] C a2 

+\d newp9 /prd newp3 ]c newp3 +\d newp Jprd P5 ]c ps = 10 + [50/1000]2 + [50/100012 

+ [50/1000110 + [50/100110 + [50/200116 = 50 

prdnewps = min(d ag - d^^ + l,min a9 ) = 259 - 50 + 1 = 200 

RPCfieyjpg — CnewpQ f pydneyspg = 24/200 — 0.12 

RPC a9 = Cajmirias = 10/1000 = 0.01 < threshold^) * RPC newp2 = 1 * 0.12 = 0. 
ag will NOT be converted into a periodic process, and will remain asynchronous and 
belong to the set A-h-k-a. 
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Except for prd neW p3 that was adjusted from 101 to 
100, all other periods in this example remain unchanged 
by the adjustperiod function. 

An alternative case where threshold (a3) is set to 
an arbitrary large value, ensuring that A-h-k process a 3 
is not converted into a periodic process, is discussed 
below with respect to Example 13. 

There exists a circular dependency relationship 
between the calculation of the RPC for each A-h-k-a 
process and the determination of the set of A-h-k-a 
processes. The calculation of the RPC for each A-h-k-a 
process depends on the original set of P-h-k processes 
S P , the set of new periodic processes S p converted from 
A-h-k-p periodic processes, and the set of processes 
that remain asynchronous S a . 

However determining which A-h-k process should 
be converted into a new periodic process in turn depends 
on the calculation of the RPC amount for the 
corresponding A-h-k-a process. It is for this reason 
that an iterative procedure is preferred to be used for 
this task. 

Below, all periodic processes with hard- 
deadlines and known characteristics (including all new 
periodic processes in S p 

that Ire converted from A-h-k-p processes, and the 
original set of P-h-k processes in S P) will be referred 
to as P-h-k processes. 

Step 2: 

A feasible pre-run-time schedule for the P-h-k 
processes is constructed. In this step, the 
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schedulabiliy of the set of all periodic processes with 
hard deadlines and known characteristics (P-h-k 
processes) are determined using their adjusted 
computation times, and a feasible pre-run-time schedule 

5 that satisfies all the specifweed constraints is 
constructed. 

In some cases, when the lengths of periods are 
relatively prime, the length of the LCM of the periods 
could become inconveniently long. One may use a 

10 function "adjustperiod" to adjust the period length of 
each periodic process, whenever the LCM becomes 
inconveniently long. 

Preferred function and procedures for adjusting the 
periods of periodic processes in order to reduce the 

15 Least Common Multiple (LCM) of the period lengths, and 
the pre-run-time schedule length are as follows: 

function adjustperiod (prd); 
begin 

j:=i; 

while refprd\j] < prd do 

j:=j + l; 
adjustperiod:- refprd(j-l]; 

end; 

procedure generate jrefprds(exp2, exp3, exp5, exp7 ? expll); 
begin 

count:= 1; 

for i:= 0 to exp2 do 

begin 

for j:= 0 to exp3 do 
begin 

for k:= 0 to expo do 
begin 

for 1:= 0 to exp7 do 
begin 
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for f:= 0 to expll do 
begin 

refprd[count]:= T * 3' * 5* * 7* * 11'; 
count:= count + 1; 

end; 

end; 

end; 

end; 

end; 

for i:= 1 to count - 2 do 
begin 

for j:= i + 1 to count - 1 do 
begin 

if refprd[i] > refprd[j] 

then 

begin 

temp:— refprd[i); 
refprd[ij:= refprd[j]; 
refprd£j]:== temp; 

end; 

end; 

end; 

end; 

procedure select .exp.upperbounds (prd max , exp2 init , exp3 iniu exp3 iniu expb iniu 

ex P^init-> ex P^initi Cms Crollj Cm7j Cm5j 

Cm3? Cm2? Cdi Cd5 5 &dZ-> 

Ce7) Ce5 3 Ce3? Ce2j Ce57, C^s, C e 2z)] 

begin 

exp2:= exp2 init ; 
exp3~ expZ init \ 
exp5:= exp5i n i t \ 
exp7:= expl init \ 
expll := expll^t; 

n:= 2^ * 3 exp3 * b exp5 * 7 exp7 * ll^ 11 ; 
stop:= false; 

if (C m * prdmax > ^) tben 
begin 

while((C ro *prd m a X ) > rc) and (not(stop))) do 
begin 
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if (Cmll * Wdmax > H * n) 

then 
begin 

n:= n * 11; 

expll:= expll + 1; 

end 

else if ({C m7 * wdmax) > (7 * n)) 
then 
begin 

n:= n *7; 

exp7:= exp7 + 1; 

end 

else if * prd max ) > (5 * n)) 
then 
begin 

n:— n*5; 
exp5:= expo + 1; 

end 

else if {(C„& *prd ?nax ) > (3 * n)) 
then 
begin 

n:= n * 3; 

exp3:~ exp3 + 1; 

end 

else if ((C m2 * prd maa: ) > (2 * n)) 
then 
begin 

n:= tc*2; 

exp2:= exp2 + 1; 

end 
else 
begin 

stop:= true; 

end; 
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end; 

end 
else 

begin {C m * prdmax < n} 

while(((C , d *prd max ) < n) and (not (stop))) do 
begin 

if {{{Co? * prdmax) < (n div 7)) and (exp7 > C e7 ) and ((exp5 - exp7) < C& 7 )) 

then 

begin 

n:= n div 7; 

exp7:= exp7 - 1; 

end 

else if {{{C&* prdmax < (n div 5)) and (exp5 > C^) and ((exp3 - exp5) < C e ^)) 
then 
begin 

n:= n div 5; 

exp5:= exp5 - 1; 

end 

else if (((Cd3 * prdmax) < {n div 3)) and (exp3 > C e3 ) and ((exp2 - exp3) < C e23 )) 
then 
begin 

n:= n div 3; 
exp3:= exp3 - 1; 

end 

else if (((C«b *prd max ) < (n div 2)) and (exp2 > C e2 )) 
then 
begin 

n:= n div 2; 

exp2:= exp2 - 1; 

end 
else 
begin 

stop:= true: 

end; 

end; 

end; 
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The function adjustperiod uses a sorted list of 
reference periods "refprd" to adjust the length of the 
period of each periodic process. It adjusts the length 
5 of the period of each periodic process "prd" to the 

largest reference period refprd (x) that is smaller or 

equal to prd. 
The procedure generate prd creates a sorted list of 
reference periods "refprd", in which each reference 
10 period refprd (x) is equal to 2 1 * 3 j * 5 k * 7 1 * ll f , 
for some integers i, j, k, 1, f, .... 
where 

0 =< i =< exp2, 0 =< j =< exp3, 0 =< k =< exp5, 0 =< 1 
=< exp7, 0 =< f =< expll, ... exp2 f exp3, exp5, exp7, 

15 expll, are the 

upperbounds on the exponents i, j, k, 1, f, that are 
applied to the prime numbers 2, 3, 5, 7, 11, .... 

In order to avoid redundancy, we will illustrate 
and discuss the methods using only the first five prime 

20 numbers 2, 3, 5, 7, 11. It is possible to use more 
prime numbers, that is, 13, 17, 19, etc., if larger 
period lengths are needed. The methods shown here can 
be extended to include any additional prime numbers 
should the need arise. 

25 The procedure select_exp_upperbounds selects the 

exponent upperbound values exp2, exp3, exp5, exp7, 
expll, based on the maximum length of the original 
periods prd max , and a set of initial values exp2 in i t , 
exp3 init , exp5 init , exp7 ini t, expll init , for exp2, exp3, 

30 exp5, exp7, expll, respectively. The Least Common 
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Multiple (LCM) of the periods will be bounded by 2 expZ 

3<sxp3 * gexpS * ^exp7 * -q^P 11 - 

There is a tradeoff in adjusting periods: shorter 
adjustedperiods result in shorter LCMs of the periods, 

5 and consequently, shorter pre-run-time schedule lengths 
and fewer instances of new processes; but will increase 
the processor utilization and waste more processor 
capacity. This tradeoff can be fine tuned using the 
exponent upperbound values exp2, exp3, exp5, exp7, 

10 expll. 

In general, larger values of the exponent 
upperbounds will increase the chances of the adjusted 
period length being close to the original schedule 
length, and reduce wasted processor capacity but will 

15 increase the LCM of the periods and schedule length. 
When the exponent upperbound associated with a larger 
prime number, say expll, is increased relative to the 
exponent upperbounds associated with smaller prime 
numbers, say exp7, exp5, exp3, exp2, while the exponent 

20 upperbounds associated with the smaller prime numbers 

are not smaller than some minimum value, e.g., min{exp7} 
= 1, min{exp5} = 2, min{exp3\ = 3, min{exp2} = 5, 
respectively, it will also have the effect of reducing 
wasted processor capacity but increasing the LCM and 

25 schedule length. 

The procedure select__exp_upperbounds, allows exp2, 
exp3, exp5, exp7, expll, to be fine tuned according to 
specific application requirements. In this procedure, 
larger values of the parameters C m , C m n, C m7 / C ra5 , C m 3, 

30 C m 2,C ci , C d7 , Cd5/ C d 3, Cd2; and smaller values for the 
parameters C e7 , C e5 , C e3 , C e2 , C e51 , C e3 5, C e2 3, are more 



66 



likely to result in greater values for expll, exp7, 
exp5, exp3, exp2, and are more likely to result in 
adjusted period lengths that are closer to the original 
period lengths and that have less wasted processor 
capacity, but are also more likely to result in longer 
LCMs of the periods, longer schedule lengths, and a 
greater number of instances of new processes. 

Assuming that the value of the exponent upperbounds 
associated with smaller prime numbers are kept greater 
than certain minimum values, increasing the value of the 
parameters Cmx or C dx associated with a larger prime 
number x, say 11, as opposed to increasing the value of 
the parameters C my or C dy associated with a smaller prime 
number y, say 2, is more likely to have a greater effect 
in reducing wasted processor capacity, but is also more 
likely to have a greater effect in increasing the LCM of 
the periods and the schedule length. 

If the value zero is assigned to all the parameters 
or C dx associated with all the prime numbers x except 
one of the prime numbers Xi, then the periods will all 
be set to some exponential value of base xi, and will 
result in very short LCMs of the periods but very 
significant amounts of wasted processor capacity, unless 
the original period lengths coincide with those 
exponential values. The parameters C elf C e5 , C e 3, C e2r 
can be used to ensure that the periods are set to 
multiples of 7 Ce7 * 5 Ce5 * 3 Ce3 * 2 Ce2 whenever 0 =< C e7 =< 
exp7 init , 0 =< C e5 =< expSinit, -=< C e 3 exp3 ini t, 0 =< C e2 =< 
exp2 init , if required by the application. For example, 
setting C e3 = 0, C e s = 2, C e 3 = 0, C e2 = 2 will ensure 
that the periods are set to multiples of 100. 
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The objective of fine tuning the values of exp2, 
exp3, exp5, exp7, expll, is to create a list of 
reference periods refprd(x), that will have values that 
are sufficiently close to the original period lengths , 

5 to satisfy the processor utilization level required by 
the application, and maximize the chances of finding a 
feasible schedule, while at the same time the values 
should be as closely harmonically related to each other 
(having a smaller LCM value) as possible, in order to 

10 reduce the schedule length and the 

number of instances of new processes, and reduce storage 
requirements and system overhead. 

For example, if the following conditions are 
satisfied, the difference between the original period 

15 length and the adjusted period length will never exceed 
10% of the original period length: 

(1) the exponent upperbounds are not smaller than the 
following minimum values: 

min{exp7} = 1, min{exp5} = 2, min{exp3} - 3, min{exp2} = 
20 5; 

(2) the maximum period length is not greater than 2 (exp2 

3) # 3 (exp3 - 1) * 5 {exp5} * 7 {exp7} * -^{expll} (the maximum period 

length is not greater than the maximum LCM length 
divided by 24) . 

25 If the exponent upperbound expll is not smaller 

than the minimum value min{ expll} = 1, then the maximum 
period length can be further increased, while still 
guaranteeing the same utilization level- For example, 
under the following conditions, the difference between 

30 the original period length and the adjusted period 
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length will never exceed 10% of the original period 
length: 

(1) the exponent upperbounds are not smaller than the 
following minimum values: 

5 min{expll} = 1, min{exp7} = 1, min{exp5} = 2, min{exp3} 
= 3, min{exp2} = 5; 

(2) the maximum period length is not greater than 2 (exp2 

1) * 3 (exp3-2) * 5 {ex P 5} * 7 {exp7} * ^{expll} (fche maximum 

period length is not greater than the maximum LCM length 
10 divided by 18) . 

The described system and methods have the useful 
property that they tend to produce adjusted period 
lengths that are very close to the original period 
lengths for processes with shorter original periods, 
15 that is, those processes that are likely to constitute 
the largest proportion of the computation work load; 
while producing adjusted period lengths that are not so 
close to the original periods for processes whose 
original period lengths are large and close to the LCM 
20 of the periods, which in many applications represent the 
smallest work loads. In special cases where processes 
with periods close to the maximum period represent a 
significant proportion of the computation work load, one 
can use larger values for the parameters 
25 C m5 , C m3/ C^, to produce adjusted period lengths that are 
closer to the original schedule lengths for processes 
with large original period lengths. 

Example A 

30 
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Assume that it is required to schedule processes 
corresponding to the following tasks: 

(1) CD-Audio tasks, that need to be serviced at a rate 
of 2.75 KHz, that is, prd {C D-Audio} - 364 [is; 

(2) ISDN Channnel tasks that need to be serviced at a 
rate of 1.5 KHz, that is, prd ISDN = 667 jj,s; 

(3) Voice Channnel tasks that need to be serviced at a 
rate of 1.375 KHz, 

that is, prdvoice = 727 |is; 

(4) Keyboard/Mouse tasks that need to be serviced 
periodically with periods of length prd{ Ke yboard/Mouse} — 

100 

ms = 100, 000 [is. 

Assume that the following initial exponent 
upperbound values are used: 

exp2 init = 5, exp3 init = 3, exp5 init = 2, exp7 init = 1, 
explli n i t = 0, and use the value 24 for the parameters 

Cm , C m i i / C m 7 , C m s , C m 3 , C^ , 

and C d , C d7 , C d5 , C d3 , C d2 , the value 0 for C el , C ebf C e3 , 
C e 2 and the values 0, 1, 2, for C e 57, C e 35, C e 23/ 
respectively. 

The select_exp_upperbounds procedure will produce 
the following values for the exponent upperbounds: exp2 
= 5, exp3 = 3, exp5 = 2, exp7 = 1, expll = 1. 

After the generate_refprd procedure has used the 
above exponent upperbounds to compute the sorted list of 
reference periods in refprd, the adjustperiod function 
will use the sorted list of reference periods to compute 
the following adjusted periods: 
prd {CD -Audio} = 360 (original 364), 
P^d ISDN = 660 (original 667), 
prdvoice = 720 (original 727), 
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prd {Key board/Mouse} = 92400 (original 100000) . 

The LCM of the periods will be 277200, which is 3 
times the length of the maximum adjusted process period 
length. 

Assume now that such a high precision is not 
required when adjusting the periods of the processes 
with maximum process length, then a smaller value, say 
1, may be used for the parameters C m , C m n, C m i, C m 5, C m 3, 
C m2 , and C d/ C d7 , C d 5/ C^, C d2 , and still use the value 0 
for C e 7/ C e s, C e 3 C e 2 and the values 0, 1, 2, for C e si} r 
C e 35/ C e 23, respectively. 

Assume that the same initial exponent upperbound 
values are used: 

exp2 init = 5, exp3 ini t = 3, exp5 init = 2, 

^^p7init = 1/ expllinit = 0. The select_exp_upperbounds 
procedure will produce the following values for the 
exponent upperbounds : 

exp2 = 5, exp3 = 3, exp5 = 2, exp7 = 1, expll = 0. 

After the generate__refprd procedure has used the 
above exponent upperbounds to compute the sorted list of 
reference periods in refprd, the adjustperiod function 
will use the sorted list of reference periods to compute 
the following adjusted periods: 
Prd (CD -Audio} = 360 (original 364), 
prdisDNl = 630 original 667, 
prdvoice) = 720 (original 727), 
prd { Keyboard/Mouse} = 75600 (original 100000) . 

The LCM of the periods will be 75600, which is 1 
times the length of the maximum adjusted process period 
length. 
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Note that in the second case, a smaller value 
for the parameters C m , C m n, C m7 , C m5 , C m3 , C m 2/ and C d , C d7 , 
C d 5f C d3 , C d2 , resulted in smaller values for the exponent 
upperbounds (expll was reduced from 1 to 0), and 

5 consequently, resulted in shorter adjusted periods, 

where the difference is greatest for the processes with 
the largest periods (prd {Key board/Mouse} was reduced from 
92400 to 75600), and the LCM was also noticably reduced 
from 3 times the maximum adjusted period length to 1 

10 times the maximum adjusted period length. 

The following descriptionwe includes a procedure 
for constructing a feasible pre-run-time schedule for a 
given set of periodic processes with offsets. 

Procedure for constructing a feasible pre-run- 

15 time schedule for a given set of periodic processes with 
offsets 

S p = [(o pi , r pi }, c pi , dpi, prdpi) 1 i = 0, 1, . . . , n] : 

begin {procedure} 
success:= false; 

for all pi let prd Vi \~ adjustperiod(prd Pi ); 
prd LC M'= LCM{prd P0J prd Pl , . . . ,prd p J; 
begin {for loops} 

for o po :~ offsetlowerbound(po) to offsetupperbound(p 0 ) do 
for o Pl :~ ofeetlowerbound(pi) to offsetupperbound(pi) do 

for Op.:— ofisetlowerbound(pi) to ofEsetupperbound(pi) do 
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for o Pn := ofFsetlowerbound(p n ) to offsetupperbound(p n ) do 
begin {loop body} 

Construct a schedule for all occurrences of all the processes in S p 
within the interval [0, max{o Pi |Vpj}] + 3 *prd LC M]] 
If the following conditions are satisfied, then set success:^ true; and 
exit from the procedure: 

There must exist a point t in the schedule, such that: 

(1) The subschedule in the interval [t, t + prd LC M] is equal to the 
subschedule in the interval [t + prd LC M, t + 2 *prd LC M\\ 

(2) All the occurrences of all processes in S p within the interval 
[i, t+prd LCM ] must be included in the subschedule in [t, t+prd LCM }: 

(3) All the occurrences of all processes in S p within the interval 
[0, t + prdhcm] must satisfy all their respective timing constraints. 

end; {loop body} 
end; {for loops} 

if success is true then set the "initial part of the pre-run-time schedule" S 0 {t) to be 
the subschedule in the interval [0, t], and set the repeating part of the pre-run-time 
schedule" S LC M(prd LC M) to be the subschedule in the interval [t, t + prd LC M}] 
end. {procedure} 



The optimal scheduling method in the aforenoted 
1990 article by Xu and Parnas that constructs a feasible 

20 schedule for a set of processes with release times, 
deadlines, precedence and exclusion relations, can be 
used for this purpose. If the processes are to be 
scheduled on more than one processor, the optimal 
scheduling method as described in the aforenoted 1993 

25 article by Xu and Parnas that constructs a non- 
preemptive feasible schedule for as set of processes 
with release times, deadlines, precedence and exclusion 
relations on multiple processors, can be used for this 
purpose. Note that it is not strictly necessary to use 

30 the scheduling method of the 1990 or the 1993 article. 
One may use any method for this step, the only 
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requirements being that the method should be capable of 
constructing a feasible schedule for a set of periodic 
processes, in which all the specified constraints and 
dependencies between the processes are satisfied. 

Example 4 

Assume that the following precedence relations 

and 

exclusion relations must be satisfied for the processes 
in 

Examples 1-3 above: 

p 6 precedes p 7 ; 

a 2 excludes a3, ag; 

a 3 excludes a2, P4, Pe; 

ag excludes a2; 

p 4 excludes a 3 , p 5 , Pe; 

p 5/ p 6 excludes} p 4 ; 

p 5 excludes pe; 

P6 excludesa 3/ p 5 . 

If the method in the aforenoted 1990 Xu and 
Parnas article is used to schedule all the P-h-k 
processes newp 3 , p 4/ p 5 , p 6 , p 7 using their adjusted 
computation times, the feasible schedule will be found 
in Figure 1. This guarantees that all the P-h-k 
processes are schedulable. 

In Example 4 above, a feasible schedule for the 
case in which the offsets of all the periodic processes 
are zero was shown. Below is another example to show 
how the procedure given above can use existing methods 
to schedule a set of periodic processes together with a 
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set of new periodic processes that are converted from 
asynchronous processes, where the original periodic 
processes and the new periodic processes may have non- 
zero offsets. 

Example B 

Assume the following A-h-k process a A (see Fig. 

10) : 

10 a A : c aA =2; daA = 7; min aA = 8. 

Assume also the following two periodic processes 

p B and p c (see Fig. 11 and Fig. 12): 
p B : o pB = 0; r pB = 1; c pB = 3; d pb = 4 
prdpB = 12. 
15 p c : o p c = 7; r pC = 0; c pB = 4; d pb = 4 
prdpB = 12. 

Assume that the application requires p B , Pc to 
have fixed offset values of 0 and 7 respectively. 

Assuming that asynchronous process a A may make 
20 its first request at time 0, the procedure for 

converting a set of asynchronous processes into a set of 
periodic processes given earlier, could convert a A into 
the following new periodic process: 
newp A : r neW pA = 0/ c new p A = 2; 
25 dnewpA = 2; prd ne wp A = 6; and 0 =< o ne wpR =< prd newP R-l = 5. 
The lowerbound of the offset of newp A is 0, and the 
upperbound of the offset of newp A is 5 (see Figure 10 

and Figure 13) . 

The procedure for constructing a feasible pre- 
30 run-time schedule for a given set of periodic processes 
with offsets given above will try each offset value of 
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OnewpA within the range of 0,prd neW pA -1 = (0,5), when 
trying to find a feasible schedule for newp A , p Bf and p c . 
When the last value in that range, o ne wpA ^ 5 is used, 
the method in the 1990 article by Xu and Parnas would 

5 find the feasible schedule illustrated in Figure 14. A 
feasible schedule is found for newp A , p B and P c , when 
OnewpA = 5 and o pD = 2. It is assumed that the 
, application requires that o pC = 7, o pB = 0 and since 
asynchronous process a A may make its first request at 

10 time 0,0 =< o ne w P A =< prd neW pA -1 = 5. The feasible 

schedule consists of a non-repeating initial schedule 
Soi for the interval (0,1), and a repeating schedule 
Slcmi2 that is of length equal to the Least Common 
Multiple of the periods of newp A , Pb, Pc, and p D , which 

15 is LCM(6, 12, 12, 12) = 12. 

Assume that in addition to the periodic 
processes newp A , p B , pc, the following periodic process 
p D exists (as shown in Figure 15) : 
Pd : ^pD} ~ 2, CpD — 1, d P D — 4, 

20 prd pD =13, 0 =< o pD =< 4. 

If the "adjustperiod" function is applied to the 
periods of newp A , p B , p c , and p D , then p D f s period prd P d 
will be shortened from length 13 to length 12, resulting 
in the modified periodic process p D = o pD , r pD , c pD , d pD , 

25 prd pD where r pD = 2, c pD = 1, d pD = 4, prd pD = 12, 0 =< o pD 
=< 4 , as shown in Figure 16. 

The other periods prd new pAf prd pB , and prd pC remain 
unchanged after the adjustperiod procedure is applied. 
Assuming that the application allows the offset of p D to 

30 be in the range of (0, 4), the procedure for 

constructing a feasible pre-run-time schedule for a 
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given set of periodic processes with offsets given above 
will try each offset value of o newpA within the range of 
(0, prd n ewpA-l) = (0 f 5), and try each offset value of o pD 
within the specified permitted range of (0, 4), when 

5 trying to find a feasible schedule for newp A , Pb, P__C, 
and p__D. When the offset values o newpA = 5, and o pD = 2, 
as shown in Figure 17 are used, the method described in 
the 1990 Xu and Parnas article would find the feasible 
schedule illustrated in Figure 18. 

10 As shown in Figure 17, the periodic process p D = 

OpD/ r pD , c pD , d pD , prdpD where r pD = 2, c pD = 1, d pD = 4, 
prd pD = 12, 0 =< o pD =< 4, where the offset of pD is set 
to a fixed value o pD = 2 during run-time scheduling when 
it is attempted to construct a feasible pre-run-time 

15 schedule for newp A , p B , p c and p D . 

As shown in Figure 18 , a feasible schedule is 
shown for newp Af p B , p c and p D/ when o ne wpA = 5 and o pD = 
2. It is assumed that the application requires that o pC 
= 7 / OpB = 0, and 0 =< o pD =< 4, and asynchronous process 

20 a A may make its first requrest at time 0. The feasible 
schedule consists of a non-repeating initial schedule 
S 0 (l) for the interval (0,1), and a repeating schedule 
S L cm(12) that is of length equal to the least common 
multiple of the periods of newp A , p B , p c and p D/ which is 

25 LCM(6, 12, 12, 12) - 12. 

The feasible schedule consists of a non- 
repeating initial schedule S 0 (i) for the interval [0,1], 
and a repeating schedule S LC m<i2 that is of length equal 
to the Least Common Multiple of the periods of newp A , 

30 p B , Pc, and p D/ which is LCM(6, 12, 12, 12) - 12. 
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The following notation is used below to denote 
the beginning and end of the time slot of each process 
in a pre-run-time schedule, the actual start time and 
actual completion time of each process, and the most 
5 recent actual arrival time of an asynchronous process at 
run-time. This notation will be used extensively below, 
s (p) is the time of the beginning of the time slot that 
was reserved for periodic process p in the pre-run-time 
schedule . 

10 S ! (x) is the actual time that periodic process or 

asynchronous process x was/will be put into execution at 
run-time. At any time t, if periodic or asynchronous 
process x has been put into execution after or at time 
t, then t =< s T (x) is true, otherwise t =< s ' (x) is 

15 true. 

s' (p) depends on the arrival times of asynchronous 
processes aj and whether and at what time they preempt 
periodic processes. s T (p) also depends on the actual 
execution times of other processes that are executed 
20 prior to p T s execution at run-time. 

e(p) is the time of the end of the time slot that was 
reserved for periodic process p in the pre-run-time 
schedule. 

e' (x) : the actual time at which asynchronous or 
25 periodic process x ! s execution ends at run-time. At any 
time t, if periodic or asynchronous process x's 
execution has ended after or at time t, then t =< e' (x) 
is true; otherwise if x's execution has not ended before 
or at time t, then It =< e T (x) is true. 
30 R f (a)}: the most recent actual arrival time of 

asynchronous process a at run-time. At any time t, if 
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asynchronous process a has arrived before or at time t, 
then R 1 (a) =< t is true, otherwise 1 R' (a) =<*is true. 
At any time t, if asynchronous process a has arrived at 
least once before time t and after or at time 0, then 0 
5 =< R T (a) is true f otherwise if a has never arrived 
before or at time t, then "JO =< RT < a ) is true- 
Example 5 

10 In Figure 1, the time slot that is assigned to 

the 

P-h-k process p_6 in the feasible pre-run-time schedule 
begins at time 114, and ends at time 144, so s (p 6 ) = 
114, e(p 5 ) = 144. The length of the time slot assigned 
15 to p 6 in the pre-run-time schedule is equal to the 
adjusted computation time of p 6 , i.e., c p e T , which 
includes the time reserved in case p$ is preempted by A- 
h-k-a processes with less latitude in an actual 
execution. 

20 Fig. 2 shows a possible actual execution of the 

P-h-k processes when they are scheduled at run-time 
together with the A-h-k-a processes ao, a if a 2 , ag, 
together with the P-h-k processes of Figure 1. In this 
execution, the worst case response time of a 2 of the A- 

25 h-k process Re a2 = rnax{RE (a 2 , t s } = RE(a 2 ,82) = e' (a 2 ) - 
Ra2 = 166 - 82 = 84. (the details are explained in 
Example 7 below, see particularly step 3) . 

Note that in Figure 2 the relative order in 
which P-h-k processes are executed at run-time, is kept 

30 the same as the relative order of the time slots that 

are assigned to those periodic processes in the feasible 
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pre-run-time schedule in Fig. 1. Note also that the 
length of the computation time indicated for each P-h-k 
process is its original computation time, not its 
adjusted computation time. For example, in Fig. 2, 
5 s 1 (p 6 ) = 114, e' (p 6 ) = 140. 

Step 3: Determine the worst case response times of the 
A-h-k-a processes 

10 A-h-k-a processes are scheduled at run-time by the A-h- 
k-a Scheduler Process (see the description later which 
describes scheduling A-h-k-a processes) , but their 
worst-case response times are determined before run-time 
in this step. Verification that each A-h-k-a process ai 

15 is schedulable is performed by checking the condition 

that a__i's latitude must be greater than or equal to its 
response time. 

Two different methods of determining the 
response time of an A-h-k-a process will now be 

20 described. The first method uses a formula to calculate 
the response time. The second method uses simulation to 
determine the response time. The second method gives 
tighter response times that can guarantee the 
schedulability of a larger number of cases, but requires 

25 a longer computation time. The first method, while not 
as accurate as the second method, is faster. In 
practice time can be saved by applying the first method 
first, and only applying the second method if the 
response time of some A-h-k-a process determined by the 

30 first method exceeds the latitude of that process. 
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"P-g" is the set of guaranteed periodic processes. In 
this step, P-g includes all the P-h-k processes, 
including those A-h-k-p processes that are translated 
into periodic processes. Later on, in Step 4, P-g is 
expanded to include all P-h-k and P-s-k processes. 

The worst case response time of an A-h-k-a 
process a_i} can be determined in accordance with the 
following method: 



For all Oi € A-h-k-a: 

RE ai = + Delay A(a h RE ai ) + DdayPfo, RE ai ) + B{ ai ) + GT(a ij J?^.) 
where 

DelayAfoi^) = Z aj eA-h-k-aAL aj <L ai Aj?i \^\ • c % 

and 

DelayP(a i) ^ ai ) = £ p , €P _ flAipi < Loi ^1 •<« 

and 

B(ai) = max{c aj ,e{pi) - | (a,- G A-h-k-a A L a . > 

A3x k ,x k € A-h-k-a Vx k G P-g: Oj excludes x k A L Xk < L a .) 
V (p, G P-g A L PJ > X aj 

A3o; fc ,a;fc € A-h-k-a Vx fc G P-g: excludes x k A L Xjfe < £ a .)} 

and 

GT{Oi,REa.) = Ep |e SGl(a,)[^l + E w€ 5G2( ai ) ["jS^l 

where 5Gl(a<) = | p< G P-g A L Pi < L a . A(a f exc/udes p,)}; 
and 5G2(o f ) = {p l \ p { e P-g A L Pl < A(3aj G A-h-k-a: a« excludes 
A L a . < L P[ )}; 



81 



It should be noted that in the above method, the 
value of c P j is the original computation time of pj (it 
does not include the time reserved for A-h-k-a processes 
with less latitude) . 

In a first assumption, for each A-h-k-a process 
ai, for each RE a i computed by the above method f if RE a i} 
=< Lai, ai will always meet its deadline at run-time. 

The following procedure can be used to compute 
the worst case response time of each A-h-k-a process: 

i:= 0; 

failure^ false; 

while i < number-of-A-h-k-a-processes and not (failure) do 
begin 

if ai € A-h-k-a 

then 

begin 

new Ca.il 

responsetimefound:== false; 

while not(responsetimefound) and not (failure) do 

begin 

RE^ = BdsykfaREprechm*) + DelayPfo, RE pra riau. i ) 

+ B{a i ) + GT{a i ,RE pTevi(mSi y, 

if REprevious. = RE neW{ 

then 
begin 

RE^ := REnewi 

responsetimefound:= true; 

end 

if (REne^ > L^) 

then failures true 

end; 

end; 

i:= i + 1; 

end 
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Example 6 



If the procedure and formula described in this 
specification is used to calculate the response times of 
5 the A-h-k-a processes in Examples 1-5 above, the 
following should be computed: 



RE ao = Coo = 2 < L ao = 2 

RE ai = c ai ^REjmin^ = 2 + [7/1000 2 = 4 . < L ai = 7 
DdayAK \RE a Jmin ao ] Ca<) +\RE a Jmzn ai ]c a = 2 + 2-4 

DelayP(a 2) EE a2 ) = [JlB il /pr(U.l c «» +r#£a 2 /prd P4 ]c P4 + \RE /pr^ fa 
+ \REj W d v ^ +\RE a2 /prd P7 ]c V7 = 20 + 26 + 16 + 26 + 16 = 104 
B(a 2 ) = c a9 = 10 

GT(a 2 , i?^a 2 ) = \RE a Jprdnew P3 ]c a2 = 20 

H £ 2 1 Cm % DdayA(a ai HEJ + DelayP(a 2 , -R£' a2 ) + B(a 2 ) + GT(a 2 ,i?£ 02 ) = 10 + 
4+ 104 + 10 + 20 = 148 <L Q2 = 239 . 
DelayA^RE^ +\REjmin ai ]c ai +\REjmm a ,\c a , -2 + 2 

DelayP(a 9s ^) = {REjprdn^} c*^ +\REjprd P Ac rA +\REjprd n ]c n 
^REjprdJc* +\REJ W ^ = 20 + 26 + 16 + 26 + 16 = 104 

Blag) = 0 

CT(g RE 1 — 0 

= cj + DelayA^, i?E a9 ) + DelayP(a 95 i?£? a9 ) + B(a 9 ) + GTK RE») = 10 + 
14 + 104 = 128 < L 02 = 259 



25 

Since the response time of every A-h-k-a process 
is less than or equal to its deadline, it is thus 
guaranteed that they are all schedulable. 

Below, the second method which uses simulation 
30 will be described to determine the worst-case response 
time of an A-h-k-a process in a feasible pre-run-time 
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schedule of guaranteed periodic processes, which 
consists of an initial part of the pre-run-time schedule 
So(to)/ which is a subschedule in the interval (0, to); 
and a repeating part of the pre-run-time schedule 
5 Slcm (prd LC M) * which is a subschedule in the interval (to, 
t 0 + prd LC M) . 

This method uses the functions of the A-h-k-a 
Scheduler and the Main Run-Time Scheduler, which are 
described in below in the section related to the run- 

10 time phase. 

A method for computing the worst case response 
time of an A-h-k-a process ai in a feasible pre-run-time 
schedule of guaranteed periodic processes consisting of 
an initial part of the pre-run-time schedule So(to), in 

15 the interval (0, tO) ; and a repeating part of the pre- 
run-time schedule S LC Mprd LC M/ 
in the interval (t 0 , t 0 + prd L cM) follows: 

fail:= false; 
20 for t s := 0 to t 0 + prd LC M - 1 do 
begin 

For each A-h-k-a process ab, such that a b e A-h- 
k-a A L ab > L ai 

A3x k/ x k e A-h-k-a Ax k e P-g: a b excludes x k A L xk 
25 =< Lai, do the following: 

let a b arrive at time t s - 1, and use the A-h-k-a 
Scheduler and Main Run-Time Scheduler to schedule a b and 
ai to obtain a response time of ai, called REi(ai, t s , 
a b ) , corresponding to each ab according to the 
30 assumptions (l)-(6) below, with the additional 

assumption that a b can always start its execution at 
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time t s - 1 (including when t s = 0) except if at time t s 
- 1 there exists some periodic process p, such that t s < 
s(p) and (a b cannot be preempted by p) A L a b => L p , and 
executing a b at time t s - 1 may cause p to miss its 

5 deadline, that is, a b is delayed by the conditions in 
either Case 1 or Case 5 of the A-h-k-a Scheduler. At 
time t = t s - 1, assume that the condition "s 1 (p) => t" 
is true for every periodic process p such that t s < s(p) 
when checking whether a b should be delayed by the 

10 conditions of Case 1 or Case 5 of the A-h-k-a Scheduler. 
When computing REi(ai, t s , a b ) , if 3pi, pi e P-g A s (pi) 
=< t s < e(pi), then assume that pi has already completed 
at time t s - 1, that is, this instance of pi will not 
have any effect on a b , a if or any other process in the 

15 system. 

(Let each A-h-k-a process a b that can possibly 
block a if arrive at time t s - 1 and determine which one 
among them will block ai for the greatest amount of 
time . ) 

20 After obtaining REi(ai, t s , a b ) for every such a b , 

use the A-h-k-a Scheduler and Main Run-Time Scheduler to 
schedule a± to obtain another response time of a±, 
called RE 2 (ai, t s ) , according to the assumptions (l)-(6) 
below, with the additional assumption that no A-h-k-a 

25 process a b , such that a b e A-h-k-a a L ab > L a i A3x k , x k € 
A-h-k-a vx k e P-g: a b excludes x k a L xk =< L a i had ever 
arrived. When computing RE 2 (ai, t s ) , if 3pi, Pi e P-g 
As(pi) =< t s < e(pi), then assume that s'(Pi) = s (Pi) 
Ae ' (pi ) = e(pi); {i.e., p x started at the beginning of 

30 its time slot and will complete its computation at the 
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end of its time slot in the pre-run-time schedule that 
was computed using adjusted computation times. 



(1) a± arrives in the system at time t s - 

(2) Unless ai is delayed because of the conditions in 
Case 1 or Case 5 of the A-h-k-a Scheduler, (see (3) 
below) f let every other A-h-k-a process a-j, such that 

L a j =< L ai arrive at the following instants in time: 
Raj(k) = t s + k*min aj , k = 0, 1, 2, . and 
be scheduled before ai whenever a± and aj have both 
arrived and ai has not yet started. If aj is delayed by 
any of the conditions in Cases 1 - 7 of the A-h-k-a 
Scheduler, then let ai be delayed by the same amount of 
time . 

(All other A-h-k-a processes whose deadlines are 
shorter or equal to ai T s deadline arrive at the same 
time as a± at time t s , and are put into execution before 
a±. ) 

(3) Whenever the conditions in Case 1 or Case 5 of the 
A-h-k-a Scheduler become true for a_i and some P-h-k 
process p at some time t, i.e.: if 3p, p e P-g: 

P-g: 

s'(p) >t A (a* cannotJbe-preemptedJby p) A > L 

MflPi,Pi € P-g: sfa) < sip) < e(p) < e(p,) A L n KLJ 

A( flp,,ft € P-g: sip) < sip { ) < efo) < e(p ) A ( a . cannoUejpreemptedJw Pi)) 

W) t) < Ca .+ E Pl eP-g A t<5(p i )< fi (p) A -.(e'( P; )<i) A L p ,<L a . Cpt + 



I mm„. I * 

or 

if ^P,Pi,P,Pi € P-g: 



s'ip) I > : t Asip) < sip 1 ) < efa) < eip) A (a £ cannot_be.preempted_by Pl ) A 
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A (A>m,Pm e P-g: t < s'(p m ) A e(p m ) < sip) A L a . < L Pm ) 

A (s(p) - t) < Ca.+ E pi€ p_ ff A ^(pfiKt) A t<s(Pi)<e(p,)<s(p) Cpt 

+ 12a k eA-h-k-a A Z. ajfe <I, p A KO<R'(a*)) V (fl , (a fc )<tA-,(e'(«»)<*)) V (R'(a*)+™"« t <*(?))) 

I mtn a) . 1 •'"it 



Let t also be the earliest time that the 
conditions in Case 1 or Case 5 become true for that 
10 instance of p and a_i, then for every other A-h-k-a 
process a_j that belongs to the following set: 

{aflty € A-h-k-a Aj^iAL a .<La.A 

V (s'ia b ) < t s A t - 1 < e '(a 6 ) A S '( aj ) < <))} 3 ^ 



(aj_ has a deadline that is shorter than or equal to ai ! s 
deadline and, either aj has never arrived; or aj has 

20 arrived but has not completed its computation; or aj may 
arrive again before time s(p); or at time t - 1 ai was 
blocked by a b and aj started its execution before t) , 
"delay" a-j's arrival time to occur at time s (p) ; if at 
time s (p) the conditions in case 1 or Case 5 of the A-h- 

25 k-a Scheduler continue to be true for some other 

periodic process p 1 , then ai should be delayed again, 
and the A-h-k processes a f j that satisfy the conditions 
of the formula for p T should be delayed again until 
s(p T ); otherwise aj arrives at s (p) , and is scheduled 

30 before ai; and assume that p starts executing at time 

S (p) + £{ akeA-h-k-a a Lak < Lp} C a k. 
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For each such aj, let only a single instance of aj 
arrive at time s (p) , even if originally there could be 
several instances of a same process aj that satisfy the 
conditions above. 
5 For each such aj ! s subsequent arrival times after 

s(p), use the same arrival times that Ire determined in 
(2) , i.e., aj f s subsequent arrival times after s(p) will 
be : 

Raj(k) = t s + k*min a j such that R a j (k) > s(p). 

10 (If at time t there exists more than one process p 

for which the conditions of either Case 1 or Case 5 are 
true for p and ai, then let the above apply to the 
process p among them that has the latest s(p) time in 
the pre-run-time schedule.) 

15 (If ai is delayed due to the conditions in Case 1 

or Case 5, then an A-h-k-a process aj could delay ai by 
a maximum amount by arriving at s(p) .) 

(4) If the end of the current instance of the 
repeating part of the pre-run-time schedule is reached, 

20 continue at the beginning of the next instance of the 
repeating part of the pre-run-time schedule. 

(5) If a x T s deadline d a i is reached but ai has not 
yet completed its computation, then set fail:- true and 
exit from the procedure. 

25 (6) If a_i ? s computation is completed before its 

deadline d__{a_i}, then record the completion time of ai 
as the response time of a± (either REi(ai, t s , a b ) for 
the current a b , or RE 2 (ai, t s ) when no such a b is assumed 
to have arrived at time t s - 1) . 

30 After the response time REi(ai, t s , a b ) 

corresponding to every a b that may block ai has been 
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computed, and the response time RE 2 (ai, t s ) that assumed 
that no such a b had arrived and blocked ai has also been 
computed, set the response time of ai with arrival time 
t s/ RE(ai f t s ) to be equal to the greatest among them, 
5 i.e., RE(ai, t s) = max{REi(ai, t Sf a b ) , RE 2 (ai, t s )}, and 
exit from the current iteration of the loop for this 
value of t s , and start the next iteration for t s := t s + 
1. 

10 end; 

if not fail then 
RE ai := max{RE(ai, t s ) | t s = 0, 1, LCM - 1} 

A description will be found below of scheduling 
15 of the A-h-k-a processes, of the A-h-k-a Scheduler and 
of definitions of the terms used above. 

It is assumed in a second assumption that for each A- 
h-k-a process a±, for each RE a i determined in the above 
procedure, if RE ai => L ai , a± will always meet its 
20 deadline at run-time. 

Example 7 

If the second method is used, that is, the 
25 simulation procedure above, to determine the response 
times of the A-h-k-a processes in Examples 1-6 above, 
the procedure will find the following. 
RE a o } • 

The maximum value of RE(a 0 , t s ) will occur when 
30 a 0 arrives at time t s - 0. Since no process excludes a 0 , 
and a 0 has the minimum latitude among all processes , a 0 
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will always be put into execution immediately after it 
arrives, thus a 0 1 s response time RE a o } = RE(a 0 , 0) = 
max{RE(a 0 , t s ) } = c a0 } = 2 => L a0 } = 2. 

5 RE a i: 

The maximum value of RE(ai, ts) will occur when 
ai arrives at time t s = 0. Since no process excludes ai, 
and only one process a 0 has less latitude compared with 
a x ! s latitude, when ai arrives at time t s = 0, assuming 
10 that a 0 will also arrive at time t s = 0, ai will only be 
delayed by a 0 's execution time, thus ai ! s response time 
REai} = max{RE(ai, t s ) } = RE(a x , 0) - c a0 + c ai = 2 + 2 = 
4 => L a i = 7. 



15 RE a2 : 

The maximum value of RE(a 2 , t s ) will occur when 
a 2 arrives at time t s = 82 but a 9 arrived one time unit 
earlier at t s - 1 = 81, so a 9 blocks a 2 at time 82. 
According to rule (2) in the simulation procedure, it is 

20 first assumed that a 0 and ai will also arrive at time t s 
= 82, and will be put into execution from time 82 to 86, 
preempting a 9 . After a 0 and a x f s completion, a 9 will 
resume at time 8 6 and complete its computation at time 
95. At time 95, a 2 will be delayed by the conditions of 

25 Case 1 of the A-h-k-a Scheduler, because e(newp 3 ) - t) = 
114 - 95 = 19 < c a2 + Cnewp3 = 10 + 10-20. According to 
rule (3) in the simulation procedure, since at time 95 
a 0 and ai belong to the set: 

{ aj | aj e A-h-k-a a j * i a L aj =< L ai a 

30 ((1(0 =< R' aj )) v (R' aj =< t Al(e T aj =< t)) v (R' aj ) + 
min aj < e(p) ) ) 
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a (s f (a b ) =< t s a t - 1 =< e' (a b ) a s' aj < t) ) } 
because ao e A-h-k-a a ao * a 2 a d a o =< d a2 a (s t (a 9 ) =< t s 
- 82 a t - 1 = 95 - 1 = 94 =< e T a 9 ) = 95 a s' (a 0 ) = 82 < 
t = 95. 

(At time t - 1 = 95 - 1 = 94 a 2 was blocked by a 9 
("a b "), and a 0 ("aj") started its execution before t = 
95) . ai also meets the above conditions similar to a 0 . 
According to rule (3) in the simulation procedure, a 0 
and ai's arrival times are "delayed" to occur at time 
s(newp 3 ) = 100 and are scheduled before a 2 to execute 
from time 100 to 104; newp 3 starts executing at time 
s(newp 3 ) + c a0 + c al = 100 + 2 + 2 - 104, and completes 
its execution at time 114. 

As L p6 = 200 < L a2 = 239 and L p7 } = 200 < L a2 = 
239, p 6 will execute from 114 to 140; p 7 will execute 
from 140 to 156; a 2 will execute from 156 to 166. Thus 
a 2 's response time RE a2 = max{RE(a 2 , t s ) } = RE(a 2 , 82) = 
e 1 (a 2 ) - R a2 = 166 - 82 = 84 < L a2 - 239. 

In effect, the simulation procedure computes a 
response time of a 2 that is equal to a 2 T s response time 
in the case that is illustrated in Fig. 2, where a 9 
arrives at time 81, a 2 arrives at time 82 and is blocked 
by a 9 until time 91; at time 91 a 2 is delayed by the 
conditions of Case 1 of the A-h-k-a Scheduler, because 
e(newp 3 ) - t) = 114 - 91 = 23 < c a2 } + c ne wp3 + c a0 + c a i = 
10 + 10 + 2 + 2 = 24. 

a 0 and ai arrive at time s(newp 3 ) = 100. 

RE a9 : 

The maximum value of RE (a 9 , t s ) will occur when 
a 9 arrives at time t s = 100; a 0 and ai also arrive at 
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time 100 and execute from time 100 to 104; newp 3 

executes from time 104 to 114; As L p6 = 200 < L a } = 239 

and L p7 = 200 < L a2 = 239, 

pe will execute from 114 to 140; 

p 7 will execute from 140 to 156; 

a2 will execute from 156 to 166. 

Finally a 9 will execute from time 166 to 176. Thus a 9 's 
response time RE a9 = max{RE(a 9 , t s } = RE(a 9/ 100) = e'(a 9 ) 
- R a9 = 176 - 100 = 76 < L a9 = 259. 

Since the response time of every A-h-k-a process 
is less than or equal to its deadline, is is possible to 
guarantee that they are all schedulable. Note that the 
response time of a2 determined by the simulation 
procedure is 84 and is tighter than the response time of 
148 determined by the formula in the first method. The 
response time of a 9 determined by the simulation 
procedure is 76 and is also tighter than the response 
time of 128 determined by the formula in the first 
method. 

In Example 1, none of the processes had offsets; 
consequently the length of the initial part of the pre- 
run-time schedule was 0. Below, another example is 
described which the periodic processes have offsets, and 
the initial part of the pre-run-time schedule is of non- 
zero length. 

Example C 

Suppose it is desired to schedule the same set 
of processes a A , Pb, Pc/ Pd given in Example A. The user 
can control the probability of each asynchronous process 
being converted into a periodic process or remaining 
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asynchronous, by setting the threshold values in the 
procedure for converting a set of asynchronous processes 
into periodic processes given earlier. 

Assume that the value chosen for the threshold 
for a A was large and asynchronous process a A was not 
converted into a new periodic process. The procedure 
for scheduling a set of periodic processes with offsets 
will construct the pre-run-time schedule for the 
processes p B , p C / Pd illustrated in Figure 19. Assuming 
a A is to be scheduled by the A-h-k-a Scheduler using the 
information in the pre-run-time schedule, the simulation 
procedure will determine that the worst case response 
time of a A will happen when process a A makes a request 
at time 6. At time 6, process a A will be delayed by the 
conditions in Case 1 of the A-h-k-a scheduling method. 
a A will be executed from time 11 to time 13 after p c has 
completed. The response time of process a A is RE(a A , t s ) 
- RE(a A/ 6) = e ? (a A ) - s' (a A ) = 13 - 6 = 7 =< d aA = 7 . In 
this case process a A is also guaranteed to always meet 
its deadline. 

The simulation procedure above is more accurate 
than the method described earier for determining the 
worst case response times of A-h-k-a processes, because 
the simulation procedure takes into account knowledge 
about the positions of the periodic processes in the 
pre-run-time schedule. In contrast, the earlier formula 
does not take into account such knowledge, and assumes 
that in the worst case, all periodic processes may 
arrive at the same time. Note that currently, none of 
the algorithms and protocols in the prior art that 
perform all scheduling activitwees at run-time, can 
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avoid making the latter overly pessimistic assumption in 
their schedulability tests. 

If it is determined that the deadline of some 
hard deadline process cannot be met, that is, if a 
5 feasible pre-run-time schedule does not exist for the 

given set of P-h-k processes, or if the response time of 
some A-h-k-a process exceeds its deadline, then one may 
have to modify the characteristics of or remove one or 
more P-h-k or A-h-k-a processes. 
10 In the first case, the pre-run-time scheduling 

method will identify the critical set, that is, the 
subset of P-h-k processes for which either modifying the 
characteristics of one or more processes in that set, or 
removing one or more processes from that set is 
15 necessary to meet the deadlines of all 
the P-h-k processes. 

In the second case, the formula or simulation 
procedure for calculating the response time of each A-h- 
k-a process can be used to identify which processes 
20 should be modifweed or removed, in order to meet the 
deadlines of all the A-h-k-a processes. 

After the user has modified the characteristics 
of, or removed one or more P-h-k or A-h-k-a processes, 
the method will be applied again. The initial 
25 determination and any subsequent modification of process 
characteristics by the user depends on the specific user 
application requirements and is outside the 
scope of this specification. This process must be 
repeated until there exists a feasible schedule for all 
30 the hard-deadline processes. 
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Step 4: A feasible pre-run-time schedule for the P-s-k 
and P-h-k processes is constructed. 

After guaranteeing the schedulability of all the 
processes 

5 with hard deadlines, the set of periodic processes with 
soft deadlines and known characteristics (P-s-k 
processes) is scheduled together with the set of all 
periodic processes with hard deadlines and known 
characteristics (P-h-k processes), a feasible pre-run- 

10 time schedule for these processes is constructed. Each 
P-s-k process is assigned an integer, called its 
"criticality level." Each P-s-k process is also 
assigned, in addition to its normal deadline, a 
"deadline upper-limit." 

15 The computation times of the soft-deadline 

periodic P-s-k processes are modifieed in the same way 
as for the hard-deadline periodic P-h-k processes. 

If it is determined that a feasible schedule 
does not exist, then the method will identify the soft 

20 critical set, that is, the subset of soft-deadline 

processes for which either modifying the characteristics 
of one or more processes in that set, or removing one or 
more processes from that set, is necessary to meet the 
deadlines of all hard-deadline processes. The method 

25 will select one process that has the lowest criticality 
level among the processes in the soft-critical set and 
increase the deadline of that process by an amount that 
does not exceed the deadline upper-limit of that process 
and attempt to find a feasible schedule again. The 
30 deadline of the process with the lowest criticality 
level will be incremented until one of the following 
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happens: either a) a feasible schedule is found; or b) 
the previously selected process does not belong to the 
newly computed critical set; or c) the revised deadline 
of that process cannot be further increased without 

5 exceeding the deadline upper-limit. 

In the latter two cases, the method will select 
another process that has the lowest criticality level 
among all processes in the soft critical set and for 
which the deadline has not yet been revised, increment 

10 its deadline, and attempt to find a feasible schedule 
again. 

If it is determined that a feasible schedule 
still does not exist after the deadlines of all the 
processes in the soft critical set have been revised and 
15 their deadline upper-limits have been reached, the 
method will provide the user with the list of soft- 
deadline processes in the soft critical set for which 
modifying the characteristics of one or more processes 
in that set or removing one or more processes in that 
20 set is necessary to meet the deadlines of all hard- 
deadline processes. 

After the user has modified the characteristics 
of one or more processes in the soft critical set, or 
removed one or more processes in that set, the method 
25 will be applieed again. The procedure will be repeated 
until there exists a feasible schedule for all the P-h-k 
and P-s-k processes. Again, the initial determination 
and any subsequent modification of process 
characteristics by the user depends on the specific user 
30 application requirements and is outside the scope of 
this specification. 
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After a feasible schedule has been found for all 
the P-h-k and P-s-k processes, the worst-case response 
times for all the A-h-k-a processes are recomputed with 
the set of P-s-k processes included in the set of 
5 guaranteed periodic processes P-g. If the worst-case 
response time of any A-h-k-a process ai exceeds its 
deadline, the method will select one process that has 
the lowest criticality level among all P-s-k processes 
that contribute to a_i's worst-case response time and 
10 increase the deadline of that P-s-k process by an amount 
that does not exceed its deadline upper-limit and 
recompute the worst-case response time. The deadline of 
the process with the lowest criticality level will be 
incremented until one of the following happens: either 
15 a) the worst-case response time of every A-h-k-a process 
is less than or equal to its deadline; or b) the 
previously selected process does not belong to the newly 
computed set of P-s-k processes that contribute to ai's 
worst-case response time; or c) the revised deadline of 
20 that process cannot be further increased without 

exceeding the deadline upper-limit. In the latter two 
cases, the method will select another process that has 
the lowest criticality level among all P-s-k processes 
that contribute to ai's worst-case response time and for 
25 which the deadline has not yet been revised, increment 
its deadline, and compute the worst-case response time 
again for each A-h-k-a process. 

If it is determined that the worst-case response 
time of some A-h-k-a process still exceeds its deadline 
30 after the deadlines of all the processes that contribute 
to a__i ! s worst-case response time have been revised and 
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their deadline upper-limits have been reached, the 
method will provide the user with the list of soft- 
deadline processes in the set that contribute to a_i 1 s 
worst-case response time for which modifying the 
characteristics of one or more processes in that set or 
removing one or more processes in that set is necessary 
to meet the deadlines of all the A-h-k-a processes. 

After the user has modified the characteristics 
of one or more processes that contribute to ai T s worst- 
case response time, or removed one or more processes in 
that set, the method will be applied again. The 
procedure should be repeated until the worst-case 
response time of every A-h-k-a process is less than or 
equal to its deadline. 

At the end of Step 4 the method will generate a 
feasible pre-run-time schedule for all the P-h-k, and P- 
s-k processes, while guaranteeing that the response 
times of all the A-h-k-a processes will be less than or 
equal to their deadlines. 

The set of P-h-k and P-s-k processes will be 
referred to as the set of guaranteed periodic processes. 
A simplified procedure for implementing Step 4 will be 
described later. 

Example 8 

Assume that in addition to the hard deadline 
processes described in Examples 1-7 above, the following 
periodic process has a soft deadline and known 
characteristics (P-s-k process) : 
p 8 : R p8 = 20, c p8 - 16, d p8 } = 55, prd p8 = 200;. 



98 



Assume further that ps T s criticality is 3, its 
deadline 

upperlimit is 100. 

Ps's adjusted computation time is: 

5 c p8 T = c p8 + ca 0 + c a i = 16 + 2 + 2 = 20. 

Firstly it will be determined that no feasible 
schedule exists for the given set of process parameters. 
The optimal schedule for the given set of parameters is 
the same as the schedule shown in Figure 3, except that 

10 d P 8 = 55 and p 8 is late by 5 time units. The soft 

critical set contains one process ps. The simplified 
procedure for Step 4 referred to above will increase the 
deadline of p 8 until d p8 T =60, at which point the 
feasible schedule of the P-h-k and P-s-k processes is 

15 obtained, as shown in Figure 3. 

If the formula in the first method is used to 
calculate the response times of the A-h-k-a processes 
the following is obtained: 



DetvA^Tf f^T " St6P r 3 ' ^ 3X6 leSS than L °° md L *> respectively. 
De ayA(a 2jJ KE a2 )= iREJmm^ +\RE a Jmin ai ]c ai =2 + 2 = 4 

DelayP(a 2 ,^ a2 ) = iREJprd^}^ +\REJprd P4 ]c Pi +\RE 4 »/ P rd l J\c» 
+r*iWM>eK +\RE a Jprd PT ]c P7 +\RE a2 /prd p& \c ps 
= 20 + 26 + 16 + 26 + 16 + 16 = 120 
B(« 2 ) = c a9 = 10; 

GT(a 2 ,RE a2 ) = \RE a Jprd newp3 ]c a2 = 20 

fx^fA <^:? 3 e 9 ayP(02 '^ a2) + B(as) + GT(a2 '^ } - 10 + 

+1o y =H r ^ /min - lc - + & E *J™^c ai +\REJmia a2 ]c ai =2 + 2 
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B(o«) = 0; 

GT(a 9}J R^ a9 ) = 0; 

If the second method is used, that is, the 
simulation procedure described above, to calculate the 
response times of the A-h-k-a processes in the examples 
above, the procedure will find the following: 

10 ao's response time RE a0 and ai f s response time RE ai will 
remain the same as in Example 6, that is: 
RE a0 = RE(a 0 , 0) = max{RE(a 0 , t s ) } = c a0 = 2 =< d a0 = 2. 
RE a i = max{RE ai/ t s ) } = RE (ai, 0) = c a0 } + c ai } =2 + 2 = 4 
=< dai = 7. 

15 RE a2 : 

The maximum value of RE(a 2 , t s ) will happen when 
a 2 arrives at time t s = 182 but a 9 arrived one time unit 
earlier at t s - 1 = 181, so a 9 blocks a 2 at time 182. 
According to rule (2) in the simulation 

20 procedure, it is first assumed that a 0 and ai will also 
arrive at time t s = 182, and will be put into execution 
from time 182 to 186, preempting a 9 . After a 0 and ai's 
completion, a 9 will resume at time 18 6 and complete its 
computation at time 195. At time 195, a 2 will be delayed 

25 by the conditions of Case 1 of the A-h-k-a Scheduler, 
because e (newp 3 - t) = 214 - 195 = 19 < c a2 + c ne wp3 = 10 
+ 10 = 20. 

According to rule (3) in the simulation 
procedure, since at time 195 a 0 and ai belong to the 
30 set: 
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{ajlcj € A-h-k-a Aj^iA L a . < L^A 

(HQ <#(«,)) V (R'( aj ) < t A ^(o,) < t)) V (#(«,) + min a . < c (p))) 
V (s'(a 6 ) < t s A t - 1 < e'(a 6 ) A S '( 0i ) < *))} ' W " 

because ao 6 A-h-k-a A a 0 * o 2 A < L(lt A (s'^) < t 3 = 182 A * - 1 = 195 - 1 
194 < etfa) = 19o A s'(a 0 ) = 182 < t = 195. 

(at time t - 1 = 195 - 1 = 194 a 2 was blocked by 
ag ("a b ") and a 0 ("a-j") started its execution before t = 
195) . ai also meets the above conditions similar to a 0 . 

According to rule (3) in the simulation 
procedure, a 0 and ai's arrival times are "delayed" to 
occur at time s (newp 3 ) = 200 and are scheduled before a 2 
to execute from time 200 to 204; newp 3 starts executing 
at time s(newp 3 ) + c a0 + c al = 200 + 2 + 2 = 204, and 
completes its execution at time 214; 
a 2 starts at time 214 and executes until time 220. 
As L p8 = d p8 ' - r p3 = 260 - 220 = 40 < L a2 = d a2 = 239, L p5 
= dps - r p5 = 250 - 230 = 20 < L a2 = d a2 = 239, 
and L p4 } = d p4 - r p4 = 200 - 0 = 200 < L a2 = d a2 = 239; 
20 p 8 will preempt a 2 at time 220; 

P8/ P5, P4 will execute from time 220 to 278; 
a 2 will resume execution from time 278 to 282; 
Thus a 2 's response time RE a2 = max{RE(a 2 , t s ) } = RE (a 2 , 
182) = e » (a 2 ) - R a2 = 282 - 182 = 100 < L a2 = 239. 
25 Figure 4 illustrates a possible run-time 

executionn of the A-h-k-a processes a 0 , ai, a 2 , a 9 , 
together with the P-h-k and P-s-k processes of Figure 3. 
The worst case response time of the A-h-k-a process a 2 
is RE a2 = max{RE(a 2 ,t s ) } = RE(a 2 ,182) = e'(a 2 ) - R a2 = 282 
30 - 182 = 100, as computed in step 4. 
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In effect, the simulation procedure computes a 
worst-case response time of a 2 that is equal to the 
response time of a 2 in the case that is illustrated in 
Figure 4, where a 9 arrives at time 181, a 2 arrives at 
5 time 182 and is blocked by a 9 until time 191; at time 
191 a 2 is delayed by the conditions of Case 1 of the A- 
h-k-a Scheduler, because e (newp 3 ) - t) = 214 - 191 = 23 
< c a2 + c neW p 3 } + c a0 + c a i = 10 + 10 + 2 + 2 = 24. a 0 and 
ai arrive at time s(newp 3 ) = 200. 
10 RE a9 : 

The maximum value of RE(a 9 , t s will happen when 
a 9 arrives at time t s = 200; a 0 and ax also arrive at 
time 200 and execute from time 200 to 204; newp 3 
executes from time 204 to 214; a 2 starts at time 214 and 

15 executes until time 220. 

As L p8 < L a2 , L p5 < L a2 , and L p4 < L a2 ; p 8 will preempt a 2 
at time 220; p 8 , p 5 , p 4 win execute from time 220 to 
278; a 2 will resume execution from time 278 to 282; 

Finally a 9 will execute from time 282 to 292. 

20 Thus a 9 's response time RE a9 = max{RE(a 9 , t s } = RE(a 9 , 
100) = e' (a 9 ) - Ra 9 = 292 - 200 = 92 < L a9 = 259. 

Since the response time of every A-h-k-a process 
is less than or equal to its deadline, it thus can be 
guaranteed that they are all schedulable. Note again 

25 that the response time of a 2 determined by the 

simulation procedure is 100 and is tighter than the 
response time of 164 determined by the formula in the 
first method. 

The response time of a 9 determined by the 
30 simulation procedure is 92 and also is tighter than the 
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response time of 144 determined by the formula in the 
first method. 

Fig. 3 illustrates the feasible pre-run-time 
schedule in which each guaranteed periodic process 
5 reserves a time frame that includes reserved processor 
capacity for any A-h-k-a process that has a shorter 
deadline than that guaranteed periodic process's 
deadline. 

10 Step 5: Determine the response times of the A-s-k 
processes 

A-s-k processes are scheduled at run-time by the 
Main Run-Time Scheduler, but their worst-case response 

15 times are determined before run-time in this step. A-s-k 
processes are scheduled at a lower priority than the A- 
h-k-a, P-h-k, P-s-k processes. That is, A-s-k processes 
are executed only when there does not exist any A-h-k-a, 
P-h-k, or P-s-k process that is ready for execution. If 

20 more than one A-s-k process are competing for execution, 
the process with the shortest deadline will be chosen 
for execution. 

An A-s-k process is not allowed to have any 
precedence relation with any other process. An A-s-k 

25 process a ± is also not allowed to have any exclusion 

relation of the form a± excludes x where x is an A-h-k- 
a, P-h-k, or P-s-k process. These restrictions are 
imposed in order to prevent A-s-k processes from causing 
any delay to A-h-k-a, P-h-k, or P-s-k processes, so that 

30 one can guarantee that all the hard deadlines will be 
satisfied, and also provide firm response time 
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guarantees for all the processes with known 
characteristics . 

Two different methods of determining the worst- 
case 

5 response time of an A-s-k process will now be described. 
The first method uses a mathematical formula to 
calculate the response time, and is very similar to the 
formula described in Step 3 for determining the worst- 
case response time of an A-h-k-a process, except that: 

10 (a) all A-h-k-a, P-h-k and P-s-k processes have higher 
priority than any A-s-k process a±, so their execution 
times are included together with the execution times of 
A-s-k processes that have shorter deadlines than a± in 
the terms Delay (a ± , RE ai ) and Delay (a if RE ai ) ; 

15 (b) because an A-s-k process cannot exclude a P-h-k, P- 
s-k, or 

A-h-k-a process, the term GT(a ± , RE ai ) is not required in 
the formula; and (c) the term B(ai) only needs to 
consider the blocking time due to A-s-k processes that 
20 have greater deadlines than a ± . Because the rest of the 
formula in Step 3 is basically the same as the formula 
used here, to avoid repetition, the complete definition 
of the formula used here is provided 
in Appendix 3. 

25 

Example 9 



30 



Assume the following asynchronous process with a 
soft deadline and known characteristics (A-s-k process) : 

aio: c a{ io}} = 10, d a{ i 0} - 300, min a{ i 0} = 300. 
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The procedure to be described below for 
determining the response times of the A-s-k processes is 
used to determine the response time of the A-s-k process 
5 aio, the following will be processed: 



DelayA(a 10 ,i2£ ai0 ) = iREaJrnin^ + \RE a Jmin ai ]c ai + \RE ai0 /mvn a2 \c a2 
+ \RE ai0 /min a9 ]c a9 = 2 + 2 + 10 + 10 = 24 

DdayP(o 10jJ RB ai0 ) = fREaJprdn^c^ + \RE a Jprd P4 ]c P4 + \RE a Jprd P5 ]c P5 
+ \RE ai0 /prd Pe ]c P6 +\RE ai Jprd P7 ]c P7 +\RE ai0 /prd Ps \c P8 = 20 + 26 + 16 + 26 + 16 
+ 16 = 120 
B(a 10 ) = 0 

REaio = Ca lQ + DelayA(a I0 , RE ai0 ) + DelayP(a 10 ,iLE aio ) = 10 + 24 + 120 = 154 
< L ai0 = 300 



The second method uses a simulation procedure to 

15 determine the worst-case response time of each A-s-k 
process. The simulation procedure used here is also 
very similar to the simulation procedure described in 
Step 3 for determining the worst-case response time of 
an A-h-k-a process, except that, 

20 (a) because all A-h-k-a processes have higher priority 
than any A-s-k process ai, they are all assumed to 
arrive at the same time as a^, together with all A-s-k 
processes that have shorter deadlines compared with ai; 
(b) because an A-s-k process cannot exclude a P-h-k, P- 

25 s-k or A-h-k-a process, there is no need for an A-s-k 
process to avoid blocking a P-h-k, P-s-k or A-h-k-a 
process such as in Case 1 and Case 5 of the A-h-k-a 
Scheduler; consequently there is no need for a rule in 
the simulation procedure for A-s-k processes that is 

30 similar to the rule (5) in the simulation procedure in 
Step 3, 
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Because the rest of the simulation procedure in 
Step 3 is basically the same as the simulation procedure 
used here, to avoid repetition, the complete description 
of the simulation procedure used here is given later in 

5 this specification. 

Similar to the case in Step 3, compared with the 
formula, the simulation procedure gives tighter response 
times that can guarantee the schedulability of a larger 
number of cases, but requires a longer computation time. 

10 The simulation procedure used here also uses the 

functions of the A-h-k-a Scheduler and the Main Run-Time 
Scheduler, which are described later. 



Example 10 

15 

This example is a description of the use of this 
simulation procedure. Assume that the second method, 
that is, the simulation procedure described later, is 
used to calculate the worst-case response time of the A- 

20 s-k process a i0 in Example 9 above, the procedure will 
find the following: 

The maximum value of RE (aio, t s ) will happen when 
aio arrives at time t s = 196. Figure 5 is an 
illustration of this case, a run-time execution of the 

25 A-s-k process aio, together with the A-h-k-a processes 
ao/ ai, a 2 , a 9 , and the P-h-k and P-s-k processes of 
Figure 3. The simulation procedure simulates this 
execution in which the worst case responsse time of ai 0 , 
REaio = max{RE(a 10 ,t s ) } = RE(ai 0 ,196) = e'(a 10 ) - Raio = 298 

30 - 196 = 102, as determined in Example 10, step 5. 
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At time 196, the simulation procedure assumes 
that a 0 , ai, a2, a 9 will arrive at the same time as aio, 
so a 0 will execute from time 196 to 198, and ai will 
execute from time 198 to 200. newp 3 will execute from 
time 200 to 210. a 2 will execute from time 210 to 220, 
P8/ Psr P4 will execute from time 220 to time 278. a 9 
will execute from time 278 to 288. 

aio will execute from time 288 to 298. Thus ai 0 ! s 
worst-case response time will be RE a io = max{RE(ai 0 , t s ) } 
= RE (aio, 196) - e 1 (a 10 ) - R a io = 298 - 196 - 102 < L al0 = 
300. 

Run-Time Phase 

During run-time, the processor capacity that is 
left unused 

by guaranteed periodic processes (the set of P-h-k and 
P-s-k processes P-g) in the pre-run-time schedule 
generated in Step 4 will be used to schedule the 
processes that are asynchronous and for which the 
characteristics are either known before run-time (A-s-k 
and A-h-k-a processes) or unknown before run-time but 
known as soon as the process arrives in the system (A-s- 
u processes) . 

In the previous step, a time slot in the 
feasible pre-run-time schedule was reserved for each 
guaranteed periodic process. However, at run-time each 
periodic process may not necessarily execute within its 
time slot in a pre-run-time schedule, because provided 
that it can be guaranteed that all the constraints will 
be satisfied, it is preferred that each process should 
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be executed as early as possible at run-time, in order 
to minimize the response times. Nevertheless, the 
beginning and end times of the time slots are important 
parameters that will be used by the run-time scheduler 

5 to determine, at each point in time, whether each 

asynchronous or periodic process can be safely put into 
execution while guaranteeing that all the constraints 
will be satisfied. 

In particular, the run-time scheduler will 

10 always guarantee that, 

(1) the actual execution order of each pair of 
"guaranteed" periodic processes pi and p 2 will be the 
same as the relative ordering of their time slots in the 
pre-run-time schedule, that is, if e(pi) =< s(p 2 ), then 

15 e' (pi) =< s T (p 2 ) ; and 

(2) the actual completion time e' (p) of each 
guaranteed 1 1 periodic process p will never exceed the 

end of p T s time slot e(p) in the pre-run-time schedule. 

20 Scheduling A-h-k-a Processes 

Each time the Run-Time Scheduler is executed, it 
will first try to schedule A-h-k-a processes according 
to the procedure below. 
25 For any A-h-k-a process a± and any P-g process 

Pi, the following should hold: 

ai should not be able to be preempted by pi, if 
the following conditions hold: 

( ai excludes pi v (3aj, aj e A-h-k-a: L aj < L pi A a± 
30 excludes aj) 
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Simplified A-h-k-a Scheduler Method 



The A-h-k-a Scheduler Method functions as part 

of the 

5 Main-Run-Time Scheduler to be described below. 
A-h-k-a-Scheduler : 

At any time t: 
if some A-h-k-a process ai has arrived at time t, 
or if some process x± completes its computation at time 

10 t 

or if t is both the release time and start time in the 
pre-run-time schedule for some P-g process p, i.e., t = 
R p - s(p) 
then 
15 begin 

for each A-h-k-a process ai that has already 
arrived and not yet completed, 

i.e. , R f (a ± ) =< t a H (e ! (ai) =< t) , if a ± 
satisfies any of the following conditions, 
20 then Delay aj,: 



Case 1: 
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In Case 1: ai is delayed either if there exists 
the possibility that the immediate execution of ai may 
cause a P-g process p with less latitude to be delayed 
(as shown in Figure 20A) ; or, if there exists the 
possibility that it may cause some A-h-k-a process aj to 
be blocked for the duration of two processes a_i and p 
which both have greater latitude compared with aj 1 s 
latitude (as shown in Figure 20B) . 

Case 2: 

As shown in Figure 20C, 

if 3x, x € P-g v x e A-h-k-a: 

s' (x) < t A~7(e' (x) =< t) ax excludes a± then Delay 
a±; 

In Case 2: a± is delayed because it is not 
allowed to preempt any process x that excludes ai- 

Case 3: 

As shown in Figure 20D, 
if 3x, x e P-g v x e. A-h-k-a: 

s ! (x) < t a"] (e> (x) =< t) a L x =< L ai 
then Delay ai; 

In Case 3: ai is delayed because it is not 
allowed to preempt any process x that has less or the 
same latitude as ai. 

Case 4: 

As shown in Figure 20E, 
if 3aj, p, aj e A-h-k-a, p P-g: 
s 1 (p) — > t a s 1 (aj) < t a 1 (e T (aj) =< t) 
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a aj excludes p a L p =< L ai 
then Delay a^. 

In Case 4: a± is delayed because it is not 
allowed to preempt any A-h-k-a process aj which excludes 
5 a P-g process p with less or equal latitude compared 
with ai's latitude. 

Case 5: 

As shown in Figure 20F, 
if 3 p, pi, p, pi ^ P-g: 

s f (p) => t a s(p) < s(pi) < e(pi) < e(p) a (aj cannot 
be preempted by pi) a L ad => L p 

a (not3p m , p m e P-g: t < s 1 (p m ) a e pm =< s(p) a L ai < L pm ) 

A {S (p) - t ) < Cai + S p iep-g A -| {e ' (pi) -< t a t =< s(pl) < e(pl) =< s (p) 
Cpi 

+ ^ak e A-h-k-a a La(k] < L(p) a ("](0 =< R'a(k) ) v (R ' (a (k) =< t a l(e' (a(k) ) =< 
t) v (R 1 (a ( k) ) +min{a(k)} < s(p)) jjTs(p) - t} /{min{a {k)lf} . c{a(k)} 

then Delay ai; 

In Case 5: ai is delayed if there exists the 
possibility that the immediate execution of a± may cause 
a P-g process p with less or equal latitude to be 
delayed, when p may be preempted by some other periodic 
process pi, and ai cannot be preempted by pi. 

25 Case 6: 

As shown in Figure 20G 7 
if 3x, a jf x € A-h-k-a vx e P-g, aj e A-h-k-a: 
s ! (x) < t a 1(e' (x) =< t) 
a x excludes aj 
30 a L aj < L x a L aj < L ai 
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then Delay aj.. 

In Case 6: ai is delayed because it is not 
allowed to preempt any process x that excludes some 
other A-h-k-a process aj which has a latitude that is 
5 less than both x and ai's latitude, because that may 
cause aj to be blocked by the 

duration of more than one process with greater latitude. 
Case 7 : 

10 As shown in Figure 20H, 

if 3p, p e P-g: 

R p =< t\ a (e f (p) =< t) a L p =< L ai 

a (s T (ai) < t a (ai cannot be preempted by p) ) 

a not3pi, pi e P-g: s(pi) =< s (p) a (e T (Pi) =< t) 

15 a (s(pi) =< s(p)\ a e(p) < e(pi)) 

then Delay ai; 

In Case 7: ai is delayed so that it can be 
preempted by a P-g process p that has a latitude that is 
less than or equal to a_i ' s latitude, when ai does not 

20 exclude p and does not exclude any A-h-k-a process with 
a latitude that is shorter than p f s latitude, and there 
does not exist any P-g process pi that has not completed 
such that p± is ordered before p and p does not preempt 
Pi in the pre-run-time schedule. 

25 

Select, among all processes ai € A-h-k-a, such 
that ai has already arrived and not yet completed, and 
ai is NOT Delayed, the process which has the Ics^st 
kWijde If more than one process is thus selected, 
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select among them the process that has the smallest 
index . 

end; 

return to Main Run-Time Scheduler, 

The A-h-k-a Scheduler has the following properties: 

Property 1. Each P-g process p f s execution can only be 
delayed by A-h-k-a processes that have less latitude 
than p's latitude. A P-g process will never be delayed 
by any A-h-k-a process that has a greater or equal 
latitude . 

Property 2. Any A-h-k-a process a± cannot be blocked by 
more than one critical section belonging to A-h-k-a 
processes that have deadlines greater than ai's 
deadline. 

Property 3. No deadlocks can ever occur. 

Property 4. Each P-g process p will always be completed 
on or before e(p), that is, the end of the time slot 
allocated to p in the pre-run-time schedule. 

Example 11 

Continuing with the set of processes in Examples 
1-10 above, assume that A-h-k-a process a2 makes a 
request at time 99. Figure 6 is an illustration of this 
case, which is a possible run-time execution of the A-h- 
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k-a scheduling method together with the P-h-k and P-s-k 
methods described with regard to Example 11, and Figure 
3, during the run-time phase. 

Because s(newp 3 ) = 100 => t = 99 a a2 excludes 

5 newp 3 A L a 2 = d a 2 = 239 => L neW p3 = d neW p3 " ^newp3 = H5 ™ 

100 = 15 e e(p 3 ) - t = 114 - 99 = 15 < c a2 + c p3 + c a0 + 
c a i = 10 + 10 + 2 + 2 = 24, the conditions in Case 1 of 
the A-h-k-a Scheduler Subroutine are true, so a2 is 
delayed. If a2 is allowed to start at time 99, then 
10 newp 3 would miss its deadline. This is because a2 

excludes newp 3 , once it starts, it cannot be preempted 
by newp 3 , thus its execution will occupy a portion of 
the time frame reserved by newp 3 in the pre-run-time 
schedule which only includes reserved processor capacity 
15 for itself and A-h-k-a processes with shorter deadlines, 
which are a 0 and ai. 

Suppose that both a 0 and ai make requests at time 
130, then ao will execute from time 130 to 132, and ai 
will execute from time 132 to 134, both using processor 
20 capacity that was reserved for them in p_6 T s reserved 
time frame. 

a 2 will be executed after newp 3 , p 6 , P7, 
since it's latitude L a2 = d a 2 = 239 is greater than the 
latitudes of newp 3 , pe, P7. 
25 Note that an A-h-k-a process ai may be blocked 

from the start time to the end time of some critical 
section of a P-g process in the pre-run-time schedule. 

One can easily determine the maximum time that 
any A-h-k-a process can be delayed by any P~g process 
30 with a simple inspection of the pre-run-time schedule. 
One can also easily make changes to a pre-run-time 
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schedule in order to avoid any excessive delay of an A- 
h-k-a process a± that may be caused by preemptions of a 
P-g process's critical section by other P-g processes. 

Above, A P-g process pi has been allowed to be 

5 preempted by some other P-g process p 2f even if this may 
cause some A-h-k-a process a to be blocked by the 
duration of two critical sections belonging to two P-g 
processes pi and p 2 which both have latitudes that are 
greater than a's latitude. This provides greater 

10 flexibility to the scheduling of P-g processes. 
However, it is easy to guarantee that any A-h-k-a 
process a cannot be blocked by the duration of two 
critical sections belonging to two P-g processes pi and 
p 2 which both have latitudes that are greater than a's 

15 latitude. To guarantee this, all one needs to do is the 
following, for all pairs of P-g processes pi and p 2 , if 
Pi excludes some A-h-k-a process a, and L P ( 2 ) => L a/ then 
add the exclusion relation pi excludes p 2 . 

If the potential run-time overhead of the A-h-k- 

20 a Scheduler in the integration approach is compared with 
the overhead of methods that schedule all the tasks at 
run-time, the following may be noticed: 
(a) With the integration approach, the number of 
processes 

25 that the A-h-k-a Scheduler needs to handle, should be 

very small. This is because, in most real-time systems, 
it has been observed that the bulk of the computation is 
performed by periodic processes, while the number of 
asynchronous processes with hard deadlines is usually 

30 very small. In addition a significant portion of the 
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asynchronous processes will be transformed into periodic 
processes when using this approach. 

(b) The interarrival times of A-h-k-a processes that are 
not converted into new P-h-k processes are likely to be 

5 long. 

(c) A significant portion of the parameters used by the 
A-h-k-a Scheduler to make scheduling decisions, are 
known before run-time, so one can pre-compute major 
portions of the conditions that are used for decision 

10 making, hence the amount of computation that needs to be 
performed for scheduling purposes at run-time can be 
minimized. 

Thus the run-time overhead of the A-h-k-a 
Scheduler is believed to be far smaller than the 
15 overhead of methods that schedule all the tasks at run- 
time . 

The Main Run-Time Scheduler 

20 At run-time, the order of the execution of any 

pair of guaranteed periodic processes, i.e., P-h-k or P- 
s-k processes is kept consistent with the order of that 
pair of processes in the pre-run-time schedule. 

A-s-u processes are scheduled at a lower 

25 priority than the A-h-k-a, P-h-k, P-s-k, and A-s-k 

processes. That is, A-s-u processes are executed only 
when there does not exist any process with known 
characteristics, i.e., A-h-k-a, P-h-k, P-s-k, or A-s-k 
process, that is ready for execution. If more than one 

30 A-s-u process are competing for execution, the process 
with the shortest deadline will be chosen for execution. 
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An A-s-u process is not allowed to have any precedence 
relation with any other process. An A-s-u process a_i 
is not allowed to have any exclusion relation of the 
form a_i excludes x where x is an A-h-k-a, P-h-k, P-s-k 

5 or A-s-k process. These restrictions are imposed in 
order to prevent A-s-u processes from causing any delay 
to processes with known characteristics; so that one can 
guarantee that all the hard deadlines will be satisfied, 
and also provide firm response time guarantees for all 

10 the processes with known characteristics. 

For any P-g process pi and any P-g process p 2 , if 
s (Pi) < e(P2) < e(Pi)f let P2 f s time slot be nested 
within pi T s time slot in the pre-run-time schedule. 

15 Main-Run-Time-Scheduler Method: 

At any time t if some process x has arrived at 
time t, or has completed at time t, 

or if t is both the release time and start time in the 
pre-run-time schedule for some P-g process p, i.e., t = 
20 R p = s(p) 

then execute the Main-Run-Time-Scheduler as follows: 
execute the A-h-k-a-Scheduler-Method described earlier; 
if some A-h-k-a process ai is selected for execution at 
time t by the A-h-k-a Scheduler 
25 then execute 
else 
begin 

if Bp, p € P-g: s' (p) =< t a 1 (e 1 (p) =< t) 
a notBpi, pi e P-g: R pi l =< t Ae l(e' (pi) =< t) a 
30 s(p) < s(pi) a e(pi) < e(p) 
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{there exists p that has started and has not 
completed, and there does not exist any other p ± that is 
ready and has not completed, such that Pi's time slot is 
nested within p ! s time slot in the pre-run-time 
5 schedule} 

then continue to execute p. 

else 

if 3p, p e P-g: R p =< t a ^(e 1 (p) =< t) 
a not3pi, pi e P-g: "|(e ! {pi) =< t) a s(pi) =< 
10 s(p)A"T(s(pi) =< s(p) a e(p) < e(pi)) 

a notBpj, pj e P-g: R pj =< t a "1(e T Pj) =< t) a 
s (p) < s (pj) a e (pj) < e (p) 

{there exists p that is ready and has not 
completed, and there does not exist any other pi that 
15 has not yet completed, such that pi is ordered before p 
in the pre-run-time schedule, and p T s time slot is not 
nested within pi 1 s time slot in the pre-run-time 
schedule, and there does not exist any other pj that is 
ready and has not completed, such that Pj 1 s time slot is 
20 nested within p ! s time slot in the pre-run-time 
schedule} 

then execute p 
else 

if 3a if a ± € A-s-k: R ai =< t a -(e 1 (ai)=< t) 
25 a not3 x: (s ! (x) < t\ a "J (e ? (x) =< t) a ( (x 

excludes ai) 

v (3a-j, aj e A-s-k: s' (x) < t a 1 (e ! (x) =< t) ax 
excludes aj 

a L a j < L x 
30 a L aj < L ai ) ) 
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{there exists A-s-k process a± that is ready and 
has not completed, and there does not exist any other 
process x such that x excludes a± or x excludes some 
process aj such that aj has a latitude that is less than 
5 both x ? s and ai's latitude, and x has started but not 
completed} 

then select among them, a process ai that has the 
shortest deadline; 

if among such processes there are some that have 
10 already started, then choose a process that has already 
started; and execute a if - 
else 

if 3a±, a± e A-s-u: R a i =< t a l(e' (ai)=< t) 
a not3 x: (s ! (x) < t a *1(e' (x) =< t a ( (x 
15 excludes a^) 

v (exists aj, aj e In A-s-u: s ! (x) < t a*| (e' (x) 

=< t) ax excludes aj 
a L a j < L x 

A L a j < L a i 

20 {there exists A-s-u process ai that is ready and 

has not completed, and there does not exist any other 
process x such that x excludes a± or x excludes some 
process aj such that aj has a latitude that is less than 
both x T s and ai's latitude, and x has started but not 

25 completed then select among them, a process ai that has 
the shortest deadline; if among such processes there are 
some that have already started, then choose a process 
that has already started; and execute ai; 
end; 
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Example 12 

Continuing with the set of processes in Examples 
1-11 above, assume the following asynchronous process 
5 an with a soft deadline and unknown characteristics (A- 
s-u process). (a u 's characteristics are only known 
after its arrival.) 

an: c a{U} = 10, d a( n } = 300. 

10 

Assume also that A-s-u process an makes a 
request at time 190; A-h-k-a process a 2 makes a request 
at time 191; A-s-k process aio makes a request at time 
196; and A-h-k-a processes a 0 and ai make requests at 

15 time 200. Figure 7 illustrates an exemple of this case, 
in particular a run-time execution of the A-s-u process 
an, and the A-s-k process alO, scheduled during main 
run-time scheduling together with the A-h-k-a processes 
ao, ai, a 2 and the P-h-k and P-s-k processes described 

20 with regard to Figure 3, in Example 12, during the run- 
time phase. 

At time 190 an will be put into execution as 
there are no other processes that are ready for 
execution. At time 191 a 2 will be delayed because the 

25 conditions of Case 1 of the A-h-k-a Scheduler will be 

true. Note that a 2 excludes newp 3/ and L neW p3 < L a2 ; if a 2 
is allowed to execute at time 191, it will cause newp 3 
to miss its deadline if a 0 and ai also preempt newp 3 . At 
time 196 a i0 will preempt an as A-s-k processes are 

30 scheduled before A-s-u processes. At time 200 a 0 will 
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preempt aio as A-h-k-a processes are scheduled before A- 
s-k processes. 

an will execute from time 190 to 196; aio will 
execute from time 196 to 200; a 0 will execute from time 

5 200 to 202; a x will execute from time 202 to 204; newp 3 
will execute from time 204 to 214. As L p8 < L a2 , L p5 < 
L a2 , and L p4 < L a2 ; ps will preempt a 2 at time 220; p 8/ 
Ps, p 4 will execute from time 220 to 278; a 2 will resume 
execution from time 278 to 282; aio will resume 

10 execution from time 282 to 288; an will resume 
execution from time 288 to 292. 

Note that each process may be completed earlier 
than the time indicated in the pre-run-time schedule, 
since the time that is reserved for each synchronous 

15 process with a shorter deadline in a guaranteed periodic 
process's time frame in the pre-run-time schedule will 
not be used by that asynchronous process if it does not 
arrive during that time frame. 

20 Example 13 

In example 3, when using the procedure for 
converting a set of asynchronous processes into a set of 
new periodic processes, threshold (33) was set to 2.5, 
25 resulting in the A-h-k process a 3 being converted into a 
new process newp 3 . 

Now assume that threshold (a 3 ) is set to an 
arbitrary large value, say 50, that would guarantee that 
a 3 would not be converted into a periodic process. 
30 In the case that A-h-k process a 3 remains 

asynchronous, because the latitude of a 3 , L a3 = d a3 = 
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114, as well as the latitudes of a 0 and ai are greater 
than the latitudes of the periodic processes p 4 , pe, P7 
in meeting their respective deadlines, the worst-case 
computation times of p 4 , p 6 , p 7 should be adjusted to 
5 leave "room" for a 0 , ai and a 3 's worst-case computation 
time as follows: 

C'p 4 = c p4 c a o + c a i + c a3 = 26 + 2 + 2 + 10 = 40 
C' p6 = C p6 CaO + c a i + c a3 = 26 + 2 + 2 + 10 = 40 
C'p 7 = C p7 C a o + C a i + C a3 = 16 + 2 + 2 + 10 = 30 

10 The pre-run-time scheduler will first construct 

the feasible pre-run-time schedule shown in Figure 8 for 
the set of P-g processes p 4 , p 5 , p 6 , p 7 . Then the 
simulation procedure for determining the worst-case 
response time of an A-h-k-a process can be used to 

15 determine a 0 , a 2/ a 3 , a 9 's worst-case response time. A- 
h-k-a process a 3 's worst-case response time happens when 
a 3 arrives at time 7, while a 2 which excludes a 3 arrived 
one time unit before a 3 at time 6. If a 0 , ai which have 
less latitude than a 3 in meeting their respective 

20 deadlines, arrive at the same time 6, a 0 will preempt a 2 
and execute from time 7 to time 9, a x will execute from 
time 9 to time 11, a 2 will continue its execution from 
time 11 to time 20, p 8 will first execute from time 20 
to time 30; at time 30 p 8 will be preempted by p 5 which 

25 executes from time 30 to time 46; at time 46 p 8 will 

continue its execution from time 46 to time 52. At time 
52, because L a3 = D a3 = 114 < L p4 = d p4 - r p4 = 200 - 0 = 
200, a 3 will execute from time 52 to time 62. A-h-k-a 
process a 3 f s worst-case response time RE a3 = {RE(a 3 ,t 8 )} 

30 - RE(a 3 ,7) = e T (a 3 ) - R a3 = 62 - 7 - 45 =< d a3 = 114. 

Similarly, one can verify that the worst-case response 
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times of all the other asynchronous processes are all 
less than or equal to their respective deadlines, as 
shown in Figure 8 . 

The embodiments described herein are 

5 advantageous methods of the integration approach 
compared with methods that perform all scheduling 
activities at run-time. It should be noted that 
existing methods or protocols that perform all 
scheduling activitwees at run-time are not able to 

10 guarantee the schedulability of the set of processes 
given in these examples. 

There are many reasons for this, including: 

1. Prior art run-time scheduling methods are not capable 
of finding optimal schedules involving critical 

15 sections, except for the simplest problem instances, 

because not enough time is available to the scheduler at 
run-time. 

2. Prior art run-time scheduling methods cannot handle 
precedence 

20 constraints, release time and exclusion constraints 
simultaneously in an efficient way. 

3. Current run-time scheduling methods are unable to 
take full advantage of the knowledge about processes 
characteristics that is available before run-time. For 

25 example, no prior art run-time scheduling method can 
completely avoid blocking of a periodic process with 
less latitude by a asynchronous process with greater 
latitude, which the integration method described herein 
is capable of doing, as shown in the examples above. As 

30 another example, when determining the worst-case 

response times of asynchronous processes, no prior art 
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run-time scheduling method can completely avoid making 
the overly pessimistic assumption that, for each 
process, all the periodic processes with shorter 
deadlines can arrive at the same time to delay that 

5 process. In contrast, the integration method in 

accordance with the present invention can avoid making 
such an overly pessimistic assumption, as shown in the 
examples where a simulation procedure can obtain tighter 
worst-case response times for asynchronous processes, by 

10 taking advantage of the knowledge of the positions of 
the periodic processes in the pre-run-time schedule. 

If the potential run-time overhead of the Main Run-Time 
Scheduler in the integration approach is compared with 
15 the overhead of methods that schedule all the tasks at 
run-time, the following will be noticed: 

(a) The Main Run-Time Scheduler is much simpler, and the 
amount of computation needed for scheduling purposes is 
much smaller, compared with most methods that schedule 

20 all the tasks at run-time. This is because most of the 
important scheduling decisions have already been made 
before run-time. In particular, the relative ordering 
of P-h-k and P-s-k processes that usually form the bulk 
of the computation in most real-time applications, was 

25 determined before run-time when the pre-run-time 
schedule was computed. 

(b) Since at run-time, the execution order of P-h-k and 
P-s-k processes is the same as the relative ordering of 
those processes in the pre-run-time schedule, one would 

30 know exactly which guaranteed periodic process may 

preempt which other guaranteed periodic process at run- 
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time. Thus one can use this information to minimize the 
amount of context switching. Thus it is believed that 
the run-time overhead of the Main Run-Time Scheduler 
should be by far smaller than the overhead of methods 
that schedule all the tasks at run-time. 
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Using the Present Invention With Multiple Processors 

The methods described above can be used for scheduling processes with ex- 
clusion relations, precedence relations, and offset constraints, release time, worst-case 
5 computation time, deadline constraints, on more than one processor. 

There are many possible ways that would allow one to use the methods with 
more than one processor. The following is just one possible set of changes to the 
procedures described earlier that would allow one to use the methods for scheduling 
processes on more than one processor. The use of the methods with multiple processors 
10 is illustrated in Example 14. 

As stated earlier, instead of using a single processor method such as the method 
in [XuPa90] in the procedure for constructing a feasible pre-run-time schedule for a given 
set of periodic processes with offsets, one should use a multiple processor scheduling 
method, such as the method in [Xu93] in that procedure. 
15 One simple strategy, that will be used in the embodiment described below, 

is to set the release time r Pi of every periodic process Pi to be equal to the beginning 
time of its time slot in the pre-run-time schedule, i.e., r Vi = s(pi). This ensures that 
every periodic process' actual execution will not start earlier than the beginning time 
of its time slot, i.e., r Pi < s'ipt)* This could prevent multiple processor anomalies 
20 that could be caused by the following situation. Some processes end earlier, and a 
first process that excludes a second process with a relatively short deadline is executed 
earlier, resulting in the first process 5 execution combining with the execution of a third 
process on another processor that also excludes the second process to increase the time 
interval in which the second process is blocked from execution. It is not difficult to 
25 design alternative methods that would allow each periodic process to start execution 
at a time earlier than the beginning of its time slot, while preventing such anomalies. 
Likewise, in the design of the Multiple Processor A-h-k-a Scheduler described below, 
there are many possible alternative strategies that would allow some more flexibility in 
scheduling the processes, however, this disclosure would be of too great length if every 
30 possible improvement is described. 
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The Multiple Processor A-h-k-a Scheduler and Multiple Processor Main-Run- 
Time Scheduler can be designed as follows. 

Each time the Multiple Processor Run-Time Scheduler is executed, it will first 
5 try to schedule A-h-k-a processes according to the procedure below. 

For any A-h-k-a process a* and any P-g process p h it will be said that 
"Oj cannot be preempted by p{\ if the following conditions should hold: 
(a,- excludes pi) V (3a i? % eA-h-k-a: L a . < L Vl A a, excludes aj) 

For any pair of P-g processes pi and p 2 > It will be said that 
10 "the time slot of pi overlaps with the time slot of p 2 " , if the following conditions should 
hold: 

< s(p 2 ) < e(pi)) V < s(pi) < cfej)) 

The Multiple Processor A-h-k-a Scheduler Method functions as part of the Multiple 
15 Processor Main-Run-Time Scheduler to be described below. 

Multiple Processor A-h-k-a-Scheduler Method: 

At any time t: 
20 if some A-h-k-a process a* has arrived at time t, 

or if some process Xi completes its computation at time t 

or if t is both the release time and start time in the pre-run-time schedule 

for some P-g process p, i.e., t^Rp — $(p) 

then 

25 for every processor k: 
begin 

for each A-h-k-a process a$ that has already arrived and not yet completed, 
i.e., R f (ai) < t A ->(e'(ai) < t), check if a* 
satisfies the following conditions, 

30 

Case 1: if on any processor 
3p,peP-g: 
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s f (p) > t A (a,i mnnotJbejpreemptedJby p) A L a . > L p 

A (#Pm,Pm e P-g: * < s'(p m ) A e(pm) < s(p) A L a , < L Pm A(£p x G P-g: 

Pi excludes a*A (pi 's time slot overlaps with p m ? s time slot)) 
A (there does not exists any interval [i,^] on processor k, such that: 
5 t < t 2 < s(p) 

A(flpi,pi GP-g: any portion of pi$ time slot is mapped to any portion of the 
interval [i, t 2 ] on the time axis corresponding to processor k in the 
pre-run-time schedule) 
A(fipj,p m GP-g: pj excludes A (p/s time slot overlaps with [£,£2])) 
10 A(£ 2 -t)>c a ,+ 

T,a k €A-h-k-a A L ak <L v A (~-(0<flf (o fc )) V (R> (a k )<tA^(e>{a k )<t)) V (K , (aj fe )+mm afe <s(p))) [^^"1 ' °a k ) 

then Delay a*; 

In Case 1: a* is delayed either if there exists the possibility that the immediate 
15 execution of a$ may cause a P-g process p with less latitude to be delayed (as shown in 
Figure 20 A); or, if there exists the possibility that it may cause some A-h-k-a process 
a,j to be blocked for the duration of two processes a{ and p which both have greater 
latitude compared with a/s latitude (as shown in Figure 20B). 

20 Case 2: if on any processor k 7 
3x,x G P-g V x G A-h-k-a: 
s f (x) <t A -■(e'(x) < t) A x excludes ai 
then Delay a*; 

25 In Case 2: m is delayed because it is not allowed to start its execution if there 

exists any process x that excludes a$ that has started but not yet completed (as shown 
in Figure 20C). 

Case 3: if on processor k 
30 3x,x G P-g V x GA-h-k-a: 

s\x) < t A -i{e?(x) <t) A L x < L ai 

then di is ineligible to execute at time t on processor k\ 
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In Case 3: a* is ineligible to execute at time t on processor k because it is not 
allowed to preempt any process x that has less or the same latitude as ai (as shown in 
Figure 20D). 

Case 4: if on processor k 7 

3oj,p, dj E A-h-k-a ? p € P-g: 

s f (p) > t A s f (aj) < t A ^(e'{aj) < t) 

A cij excludes p A L p < 

then a>i is ineligible to execute at time t on processor k 

In Case 4: ai is is ineligible to execute at time t on processor k because it is 
not allowed to preempt any A-h-k-a process dj which excludes a P-g process p with less 
or equal latitude compared with a^s latitude, (as shown in Figure 20E) 

Case 5: on processor k, 

if 3x, a,j, x € A-h-k-a Vx GP-g, 

dj G A-h-k-a: 

s'{x) < t A ^{e r (x) < t) 

A x excludes dj 

A L aj < L x A L aj < 

then di is ineligible to execute at time t on processor k. 

In Case 5: di is ineligible to execute at time t on processor k because it is not 
allowed to preempt any process x that excludes some other A-h-k-a process dj which 
has a latitude that is less than both x and a^s latitude, because that may cause dj to 
be blocked by the duration of more than one process with greater latitude (as shown 
in Figure 20G). 

Case 6: if on processor k 
3p,p G P-g: 

Rp<t A ^(e'(p) < t) A L p < 
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A-i(s'(a$) < t A (aj cannotJbejpreemptedJby p)) 
A e P-g: sfa) < s(p) A -(e ; (pi) < t) 

A-«(5(p») < s(p) A e(p) < e(p»)) 
then a,i is ineligible to execute at time t on processor k\ 

5 

In Case 6: a* is ineligible to execute at time t on processor k so that it can 
be preempted by a P-g process p that has a latitude that is less than or equal to a^'s 
latitude, when a* does not exclude p and does not exclude any A-h-k-a process with a 
latitude that is shorter than p 5 s latitude (as shown in Figure 20H). 
10 end; 

For each processor fc, select, among all processes a* e A-h-k-a, such that a* has already 
arrived and not yet completed, and Oj is NOT Delayed, and Oj is NOT ineligible to ex- 
ecute at time t on processor fc, the process which has the shortest deadline and execute 
15 that process on processor fc. If more than one process is thus selected, select among 
them the process that has the smallest index. 

end; 

20 return to Multiple Processor Main Run-Time Scheduler; 



Multiple Processor Main-Run-Time-Scheduler Method: 

25 

At any time t: 

if some process x has arrived at time t, or has completed at time i, 
or if t is both the release time and start time in the pre-run-time schedule 
for some P-g process p, i.e., * = Rp — s(p) 
30 then execute the Multiple Processor Main-Run-Time-Scheduler as follows: 

execute the Multiple Processor A-h-k-a-Scheduler; , 
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For each processor k, if some A-h-k-a process a* was selected for 
execution at time t on processor k by the A-h-k-a Scheduler 
then execute d{ 
5 else begin 

if on processor k 7 

3p,pGP-g:s'(p)<tA-(e / (p)<t) 

(there exists p that has started and has not completed) 
then continue to execute p. 

10 else 

if on processor 

3p,f>eP-g: Bp<tAi(e'(p)<t) 

(there exists p that is ready and has not completed) 
then execute p 

15 else 

if 3a h Oi e A-s-k: R ai < t A -i(^(oi) < t) 

A £s : {s'(x) < t A ->(e'(x) < t) A ((x excludes Oj) 

V (3a i? aj G A-s-k: s'(x) < t A ->(e ; (x) < t) A x excludes dj 
A L a . < L x A L aj < L^) 

20 (there exists A-s-k process a { that is ready and has not completed, 

and there does not exist any other process x such that x excludes 
di or x excludes some process dj such that dj has a latitude that is 
less than both x's and a^s latitude, and x has started but not com- 
pleted) then select among them, a process a* that has the shortest 

25 deadline; if among such processes there are some that have already 

started, then choose a process that has already started; and execute 

else 

if 3a i5 di e A-s-u: < t A -^(a*) < t) 

30 

A fix : {$'{x) < t A ^(e'(x) < t) A ((a excludes a*) 

V (3aj,aj G A-s-u: s'(x) <t A -*{e'{x) < t) A x excludes dj 
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A L aj < L x A L aj < L a .)) 

(there exists A-s-u process a % that is ready and has not completed, 
and there does not exist any other process x such that x excludes 
d{ or x excludes some process dj such that aj has a latitude that 
is less than both x's and a* ? s latitude, and x has started but not 
completed) 

then select among them, a process a* that has the shortest deadline; 
if among such processes there are some that have already started, 
then choose a process that has already started; and execute ai\ 
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The multiple processor simulation method for determining the worst-case response time 
of A-h-k-a processes can be designed as follows: 

Multiple processor method for computing the worst-case response time of an A-h-k-a 
5 process a$ corresponding to a feasible pre-run-time schedule of guaranteed periodic pro- 
cesses consisting of an initial part of the pre-run-time schedule 5o(*o) ? in the interval [0, 
t 0 ]; and a repeating part of the pre-run-time schedule S LC MijP^d L cM), in the interval 

10 fail:= false; 

for t s := 0 to t 0 + prd LC M - 1 do 
begin 

For each A-h-k-a process a$, such that a b € A-h-k-a A L ab > L ai A3xk,Xk £ 
A-h-k-a Vxjt € P-g: a b excludes x k A L Xk < L^, do the following: 

15 let a b arrive at time t s — 1, and use the Multiple Processor A-h-k-a Scheduler 

and Multiple Processor Main Run-Time Scheduler to schedule a b and a { to 
obtain a response time of a*, called REi(ai,t s ,ai>) 7 corresponding to each a b 
according to the assumptions (l)-(6) below, with the additional assumption 
that a b can always start its execution at time t s — 1 (including when t s = 0) 

20 except if at time t s — 1 there exists some periodic process p, such that t s < s(p) 

and (a b ainnotJtejpreemptedJby p) A L ab > L p , and executing a b at time t s — 1 
may cause p to miss its deadline, that is, a b is delayed by the conditions in Case 
1 of the Multiple Processor A-h-k-a Scheduler. At time t — t s — 1, assume that 
the condition V(p) > t M is true for every periodic process p such that t s < s(p) 

25 when checking whether a b should be delayed by the conditions of Case 1 of 

the Multiple Processor A-h-k-a Scheduler. When computing REi{a^t s ^ah)^ if 
^PhPi G P-g As(pj) < t s < e(pi), then assume that p\ has already completed 
at time t s — 1, that is, this instance of p\ will not have any effect on a&, a^, or 
any other process in the system. 

30 
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(Let each A-h-k-a process a b that can possibly block a*, arrive at time t 3 - 1 
and determine which one among them will block a; for the greatest amount of 
time.) 

After obtaining RE x {di, t s , a b ) for every such a 6 , use the Multiple Processor A- 
h-k-a Scheduler and Multiple Processor Main Run-Time Scheduler to schedule 
en to obtain another response time of a i7 called RE 2 {a h t s ), according to the 
assumptions (l)-(6) below, with the additional assumption that no A-h-k-a 
process a b , such that a b G A-h-k-a A L ab > L ai A3x k ,x k G A-h-k-a Vx k G P-g: 
a b excludes x h A L Xk < had ever arrived. When computing RE 2 {<k,t s ), if 
3pi,Pi G P-g Asipi) <t s < e(p z ), then assume that s f (p{) = 5(ft)Ae'(pi) = e(pi); 
{i.e., pi started at the beginning of its time slot and will complete its computa- 
tion at the end of its time slot in the pre-run-time schedule that was computed 
using adjusted computation times. 

(1) Oi arrives in the system at time i s . 

(2) Unless Oj is delayed because of the conditions in Case 1 of the Multiple 
Processor A-h-k-a Scheduler, (see (3) below), let the A-h-k-a processes a 5 in 
the set {aj\L a . < A a 5 excludes a,} arrive one by one in a serial sequence 
such that each process in the set arrives exactly at the same instant that the 
process before it in the sequence has just completed, with the first process in 
the sequence arriving at the time that a b has just completed if a b is able to 
block a u and at the earliest time t,t s <t that it can be executed, if a b does not 
block at; let every other A-h-k-a process dj, such that L aj < arrive at the 
time that the last process in the above serial sequence has completed; or at the 
following instants in time: R aj (k)=t s + k* min aj , k = 0,1,2,..., L^fer J ' if 
no such processes in the above set exist, and be scheduled before a, whenever 
di and aj have both arrived and a* has not yet started. If dj is delayed by 
any of the conditions in Cases 1-6 of the Multiple Processor A-h-k-a Scheduler 
then let a* be delayed by the same amount of time. 
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For each such a/s subsequent arrival times, use the arrival times: R aj {k) = 
t s + k * min aj , and whenever there is more than one such process arriving at 
a time that any such process is executing or has arrived but not completed, 
modify their arrival times as described above. 

( All A-h-k-a processes that have shorter deadlines and that exclude a* arrive 
in a serial sequence that maximizes the time that is excluded, all other A- 
h-k-a processes whose deadlines are shorter or equal to a^s deadline arrive at 
the end of that sequence if any, and are put into execution before a^. 

(3) Whenever the conditions in Case 1 of the Multiple Processor A-h-k-a Sched- 
uler become true for a\ and some P-h-k process p at some time t, i.e.: if on 
any processor &, 3p,p G P-g: 

s'(p) > i A (a,i cannot J)ejpreernptedJyy p) Al^ > L p 

A (£p m ,ft» € P-g: t < s f (p m ) A e(p m ) < s(p) A L Qi < L Pm A(£pi e P-g: 

pi excludes tyA (pi 5 s time slot overlaps with p m 's time slot)) 
A (there does not exists any idle interval [t , £2] on some processor fc, such that: 

t<t 2 < s(p) 

A(fipj 7 p m EP-g: Pj excludes a t * A (p/s time slot overlaps with [£,£2])) 
A(* 2 -i) >c^ + 

Y!,a k eA-h-k-a A L afe <L p A ("■(()<#' (a k )) V (R f (a k )<tA->(e f (a h )<t)} V (/£ / (a fc )+min 0fc <s(p))) 

let t also be the earliest time that the conditions in Case 1 become true for 
that instance of p and a^ 

then for every other A-h-k-a process aj that belongs to the following set: 
{a,j\aj G A-h-k-a A j ^ i A L a . < L^A 

(HO < V (jR'(cej) < * A -^'(aj) < t)) V (R f (aj) + min aj < sip))) 

V {s'(a b ) < t 8 A t - 1 < e'(a&) A s'^*) < t))} 

(aj has a deadline that is shorter than or equal to aj ? s deadline and, either aj 
has never arrived; or a,j has arrived but has not completed its computation; or 
aj may arrive again before time s(p); or at time t — 1 a* was blocked by a& and 
aj started its execution before t), 
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"delay" a/s arrival time to occur at the following time: let the A-h-k-a pro- 
cesses a,j in the set {a,j\L aj < A dj excludes a*} arrive one by one in a 
serial sequence such that each process in the set arrives exactly at the same 
instant that the process before it in the sequence has just completed, with the 
first process in the sequence arriving at the time that p has just completed; let 
every other A-h-k-a process such that L aj < L ai arrive at the time that the 
last process in the above serial sequence has completed; or at the completion 
time of p, e(p)', if no such processes in the above set exist, and be scheduled 
before a* whenever a* and aj have both arrived and a* has not yet started. If 
dj is delayed by any of the conditions in Cases 1-6 of the Multiple Processor 
A-h-k-a Scheduler, then let a 2 - be delayed by the same amount of time. If at 
time s(p) the conditions in Case 1 of the Multiple Processor A-h-k-a Sched- 
uler continue to be true for some other periodic process p', then a* should be 
delayed again, and the A-h-k processes that satisfy the conditions of the 
formula for p' should also be delayed again in similar manner. For each such 
aj, let only a single instance of aj arrive at the above times, even if originally 
there could be several instances of a same process aj that satisfy the conditions 
above. 

For each such a/s subsequent arrival times after s(p), use the same arrival 
times that were determined in (2), i.e., a/s subsequent arrival times after s(p) 
will be: R aj {k) = t s + k*min aj such that R aj (k) > s(p), and whenever there is 
more than one such process arriving at a time that any such process is execut- 
ing or has arrived but not completed, modify their arrival times as described 
above. 
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(If at time t there exists more than one process p for which the conditions of 

Case 1 are true for p and then let the above apply to the process p among 

them that has the latest s(p) time in the pre-run-time schedule.) 

( if di is delayed due to the conditions in Case 1, then an A-h-k-a process 

flj could delay a{ by a maximum amount by arriving at the above described 

times.) 

(4) If the end of the current instance of the repeating part of the pre-run- 
time schedule is reached, continue at the beginning of the next instance of the 
repeating part of the pre-run-time schedule. 

(5) If Oj's deadline d ai is reached but a* has not yet completed its computation, 
then set fail:— true and exit from the procedure. 

(6) If aj's computation is completed before its deadline d^., then record the 
completion time of as the response time of (either REx{a^i s ,a^) for the 
current a&, or ilE^as,!,) when no such a& is assumed to have arrived at time 

t s - !)• 

After the response time REi{a i7 t s ,at) corresponding to every a& that may 
block a,i has been computed, and the response time RE2(a ij t s ) that assumed 
that no such had arrived and blocked has also been computed, set the 
response time of a>i with arrival time t s , RE(a,i 7 t s ) to be equal to the great- 
est among them, i.e., RE(ai,t 3 ) = max{REi(a i ,t s ,a b ) J RE2((ii,t s )}, and exit 
from the current iteration of the loop for this value of f s , and start the next 
iteration for t s t s + 1. 

end; 

if not fail then 

RE ai ~ max{RE{oi, t s ) \ t s = 0, 1, ... ? LCM - 1}; 
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Assuming that the same adjusted_capacity function is used for adjusting the 
computation times of periodic processes, the Multiple Processor A-h-k-a Scheduler also 
has the following properties, similar to the properties of the version of the A-h-k-a 
Scheduler described earlier : 

5 

Property 1. Each P-g process p's execution can only be delayed by A-h-k-a 
processes that have less latitude than p's latitude. A P-g process will never be delayed 
by any A-h-k-a process that has a greater or equal latitude. 

10 Property 2. Any A-h-k-a process a* cannot be blocked by more than one criti- 

cal section belonging to A-h-k-a processes that have deadlines greater than a^'s deadline. 

Property 3. No deadlocks can ever occur. 

15 Property 4. Each P-g process p will always be completed on or before e(p), 

that is, the end of the time slot allocated to p in the pre-run-time schedule. 

Example 14 

20 Suppose that a multiprocessor system consists of two processors, two asynchronous 
processes with hard deadlines and known characteristics (A-h-k processes): a a and 
a E \ and 3 periodic processes with hard deadlines and known characteristics (P-h-k 
processes) pb> Pc> and Pd as follows. 
<u: c aA = 2, d aA = 8, min aA = 8; 

25 a E '- c aE = 2,d ai = 14, min ai = 1,000; 

Pb- r PB = l,Cp fl = 3,dp B = 4,prd PB = 6,0 < o PB < 3; 
PC- r pc = 0, Cp c = 1, d pc = 2,prd pc = 4; o PD = 0; 
Pd- r PD = 0, Cp D = 1, d PD = l,prd PD = 3, 0 < o PD < 4; 

It is assumed that the application requires that o pc = 0, 0 < o PB < 3, and 

30 0 < o PD < 4, and asynchronous process a a may make its first request at time 0. It is also 
assumed that the application requires the following relations be satisfied: a a excludes 
Pd, Pd excludes eu, cla excludes ps, Pb excludes dU, pc excludes p&, po excludes pc, 
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<xe excludes ps> Pb excludes a#; 

Suppose that when converting a A to a periodic process, when determining 

dnempA — Ca A + conversionjroom(a A )] 



the following formula was used in the conversion_room function: 



conversion jroom(a A ) = 



I 2 1 + I — ~ — I * s- 

m o i €5 0 Ada,<d as .A i# rom aj 



where m is the number of processors. 

Then in the procedure for converting A-h-k processes into periodic processes , prior to 
entering the while loop, d n&BPA = c A + {c B + cc + c D )/m = 2 + f (2 + 1 + l)/2] = 4. 
After the second iteration of the while loop, d newpA = c A + \(cc + c D )/m] = 2 + [(1 + 
1)/2"| = 3. prd newpA = (d A - d newpA + l) = 8- 3 + l = 6;0< o newVA < prd newpA - 1 = 
6-1 = 5. 

Suppose further that the system designer wanted to increase the chances of a A being 
converted into a periodic process, so the threshold(aA) was assigned a low value of 0.5. 

RPCnewpA = c nev}pA/P T dnewpA = 2/6 = 0.33- 

RPC aj = c a Jmm aj = 2/8 = 0.25. 

As threshold(a A ) * RPC newpA — 0.5 * 0.33 < RPC aA — 0.25, the procedure will convert 
a A into a periodic process newp A . 

Suppose also that the system designer did not want to be converted into a 
periodic process, so threshold^) was assigned a high value of 50. The procedure will 
not convert a® into a periodic process. 

If the method in [Xu93] was used by the procedure for constructing a feasible 
pre-run-time schedule for a given pre-run-time schedule with oflsets, it will find the 
feasible schedule for newp A , ps, Pc, and po, on two processors illustrated in Fig. 20, 
when the offsets are set to the following values: o newpA =2, o PB =3, and o po = 1. 
^hf feasible schedule consists of a non-repeating initial schedule S 0 (l) for the interval 
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[0,1], and a repeating schedule Slcm (12) that is of length equal to the Least Common 
Multiple of the periods of newpA, Pb> Pc, and pr> ? which is LCM(6, 6, 4, 3) = 12. 

If a E is scheduled by the Multiple Processor A-h-k-a Scheduler using the in- 
formation in the pre-run-time schedule including the processes newpA, Pb, Pc, Pd con- 
structed by the Pre-run-time Scheduler above, then o^'s worst-case response time will 
happen when a E makes a request at time 3, and will be delayed by the conditions in 
Case 1 of the Multiple Processor A-h-k-a Scheduler at time 3, a E will be executed from 
time 13 to time 15 after p Bl has completed. The multiple processor simulation proce- 
dure for determining each A-h-k-a process* worst-case response time will simulate this 
execution in which a E s worst-case response time is RE(a E ,t 3 ) = RE(a E ,3) = e'(a E ) 
- s'(a E ) = 15 - 3 = 12 < d aB = 14. In this case a E is guaranteed to always meet its 
deadline. See Fig. 21. 

Suppose the value chosen for threshold^) is greater than 0.75, then A-h-k 
process will not be converted into a new periodic process. If qa is scheduled by 
the Multiple Processor A-h-k-a Scheduler using the information in the pre-run-time 
schedule including the processes, p^, pc, Pd constructed by the Pre-run-time Sched- 
uler above, then a^'s worst-case response time will happen when a a makes a request 
at time 3, and will be delayed by the conditions in Case 1 of the Multiple Processor 
A-h-k-a Scheduler at time 3. will be executed from time 8 to time 10 after pp 2 has 
completed. a E s response time is RE{a A ,t s ) — RE(a A ,3) — e'(a A ) - s'(a A ) = 10 - 3 = 
7 < d aA = 14. In this case qa is guaranteed to always meet its deadline. See Fig. 22. 
However, while it is possible to guarantee that both a a and a E will always meet their 
respective deadlines when is converted into a new periodic process newpA as illus- 
trated in Fig. 21; it is interesting to note that, if a a is not converted into a new periodic 
process and remains asynchronous, then it would be impossible to guarantee that a E 
will always meet its deadline, because there exist certain times, e.g., any time between 
13 and 16, at which, if a E is put into execution, it may be preempted by a a and cause 
Pb to miss its deadline. Prohibiting cla from preempting a E by adding the exclusion 
relation a E excludes a a is not a solution, because not allowing a a to preempt a E will 
increase a^'s worst-case response time to exceed qa\ deadline. This example illustrates 
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that, in certain cases, it may be advantageous to 
convert an asynchronous process with a hard deadline and 
known characteristics into a new periodic process and 
schedule it before run-time. 

It should be noted that various other 
embodiments of the present invention may be designed. 

For example, tables of safe start time intervals 
for asynchronous processes may be used. In the methods 
described prior to the above description of scheduling 
processes on multiple processors, each periodic process 
was not restricted to execute within the time slot that 
was used to reserve processor capacity for that periodic 
process in the pre-run-time schedule. However, it is 
possible to enforce the requirement that every periodic 
process must execute strictly within its reserved time 
slot in the pre-run-time schedule, simply by changing 
each periodic process p's release time R p to be equal to 
the beginning of its time slot in the pre-run-time 
schedule, i.e., set R p = s(p) for every p. 

One advantage of doing this, is that it will 
make the execution times of periodic processes highly 
predictable, and thus allow construction of tables of 
"safe start time intervals" for asynchronous processes 
before run-time. Such tables would allow asynchronous 
processes to be scheduled at run-time by simple table 
lookup, and substantially reduce the run-time overhead 
of scheduling asynchronous processes. 

The safe start time intervals can be computed by 
using the A-h-k-a Scheduler (or Multiple Processor A-h- 
k-a Scheduler) to determine, for each point in time t of 
the pre-run-time schedule, and for each processor k, 
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whether each asynchronous process ai can be put into 
execution at time t on processor k. 

Example 15 

For the asynchronous process a Ef a A in the system 
in Example 14, the following "safe start time tables" 
may be constructed. 

When a A is converted into a new periodic process 
newp A , and the pre-run-time schedule is as shown in 
Figure 21, the safe start time table for a E should 
preferably contain the following "safe start time 
intervals" : 

on processor 1: empty; 

on processor 2: { (k * 12) +1, (k * 12) +2}, k = 
0,1,2,... 

When a A is not converted into a new periodic 
process, and the pre-run-time schedule is as shown in 
Figure 22, the safe start time table for a A should 
preferably contain the following "safe start time 
intervals" : 

on processor 1: { (k * 6) + 2}, k = 0,1,2,... 
on processor 2: { (k * 12) +2}, k = 0,1,2,... 

When a A is not converted into a new periodic 
process, and thepre-run-time schedule is as shown in 
Figure 22, the safe start time table for a E should 
preferably contain the following "safe start time 
intervals" : 
on processor 1: empty 
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on processor 2: empty 



The safe start time intervals define the only 
times at which an asynchronous process can start its 
execution on a processor when the processor is idle 
without the possibility of causing some hard deadline 
process to miss its deadline. 

Many priority and or criticality levels may be 
handled. One can easily adapt the present invention to 
handle any number of priority/criticality levels. 

If some set of periodic processes is to be 
treated at the same priority as some set of asynchronous 
processes, then they could be scheduled in a way similar 
to the way P-h-k processes and A-h-k processes are 
scheduled as described earlier. 

If some set of periodic processes is to be 
treated at a higher priority than some set of 
asynchronous processes, then they could be scheduled in 
a way similar to the way P-h-k processes and A-s-k 
processes are scheduled as described earlier. 

If some set of periodic processes is to be 
treated at a lower priority than some set of 
asynchronous processes, then they could be scheduled in 
a way similar to the way P-s-k processes and A-h-k 
processes have been scheduled as described earlier. 

If some set of periodic processes is to be 
treated at a lower priority than some other set of 
periodic processes, then they could be scheduled in a 
way similar to the way I scheduled P-s-k processes and 
P-h-k processes have been scheduled as described 
earlier. 
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If some set of asynchronous processes is to be 
treated at lower priority than some other set of 
asynchronous processes, then they could be scheduled in 
a way similar to the way A-s-k processes and A-h-k 

5 processes have been scheduled as described earlier. 

For example, although in this specification A-s- 
k processes are described as having been scheduled at a 
priority level that is lower than P-s-k processes, a 
different set of asynchronous processes with soft 

10 deadlines and known characteristics, say A-s-k-2, could 
have been chosen, that is scheduled at the same priority 
level as the P-s-k processes. Then the relationship 
between the A-s-k-2 processes and the P-s-k processes 
could be handled in a way that is similar to the way the 

15 relationship between the A-h-k and P-h-k processes was 
handled. 

When using the integration method to schedule 
processes with different priority levels, the following 
general rules should be observed: 
20 (a) Periodic processes with known characteristics 
should be scheduled before run-time. The worst-case 
response times of asynchronous processes with known 
characteristics should also be determined before run- 
time. At run-time, the asynchronous processes should be 
25 scheduled in a way that guarantees that the timing 

constraints of all processes scheduled in the pre-run- 
time phase are always satisfied. Processes with unknown 
characteristics should be scheduled at a priority level 
that is lower than that of all processes with known 
30 characteristics . 
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(b) One should schedule the set of processes that have 
higher priority first and make sure that all their 
timing constraints are satisfied, before using the 
remaining processor capacity to schedule a set of 
processes that have lower priority. 

In the present invention, different methods for 
scheduling each type of process, while observing the 
general rules above, may be used. 

The present invention can also be used in an on- 
line mode. In such cases, in Step 2, when constructing 
a feasible pre-run-time schedule, when using the method 
described in the aforenoted 1990 article by Xu and 
Parnas, instead of constructing a search tree, the 
method can be used in a way such that it always only 
constructs one schedule for each set of processes, which 
should 

be as fast as any existing method, and still provide 
better chances of finding a feasible pre-run-time 
schedule than other methods. 

As noted earlier, a simplified procedure for 
Step 4, pre-run-time scheduling of periodic processes 
with soft deadlines and known characteristics, will now 
be described. 

In order to try to find a feasible schedule of 
all soft-deadline periodic processes together with all 
the guaranteed hard-deadline periodic processes using 
the optimal method, if a feasible schedule does not 
exist, then find an optimal schedule. 
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discontinues false; 

nocandidate:— false; 

while not discontinue do 

begin{try to construct a feasible schedule} 

if e'(pi) - D Vl = max{e'(p i ) - D Pi \ V i £ P-t-k V Pi e P-s-k} and e'fa) > 
{p; is the latest process and p\ is late} 

then 

begin{try to reduce the lateness of latest process pi} 
candidatefound:— false; 
CandidateSet:= P-s-k 

while not candidatefound and not nocandidate do 

begin{search for candidate to revise deadline} 
select pj such that 

Pj G CandidateSet A d Pj < ^ppHmii^) A 
criticality(pj) = min{criticality(pi ) | pi in critical set Z(pi)} 
{Z(pO is a set of processes that includes the latest 
process pi and there is no time during which the processor 
is idle between their execution, (see [24])} 
if no such pj exists then 
nocandidate:= true; 

else 
begin 

if e'(pi) + 1 < d uvv iimit{j>j) 

then 

begin 

then dpy— e'(pO + 1 

{this will cause pj to 

be scheduled after p\ 

which may help reduce lateness} 
else dpj:= e'(pz); 

{if Pj itself is latest 

then set such 

that pj will not be late} 
candidatefound:— true 

end 

else remove pj from CandidateSet 
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{scheduling pj after p\ 
is futile} 

end; 

end{search for candidate to revise deadline}; 

if nocandidate 

then 

begin 

output Z(pi); 
discontinues true; 

{the user must modify the 

characteristics of one or more 

processes in Z{pj) before 

a feasible schedule can be found} 

end 
else 
begin 

Use the optimal algorithm in [24] to try to find 

a feasible schedule again with the revised dp. ; 

if feasible does not exist, then find an optimal schedule; 

end; 

end{try to reduce the lateness of latest process p\} 

else discontinue— true; {feasible schedule found} 
end{try to construct a feasible schedule}; 
{Verify the schedulability of all A-h-k-a processes} 
for each a* € A-h-k-a do 

if not discontinue 

then 

begin 

while REqj > L a . and not discontinue do 
begin 

let GandidateSet:= { pj \ pj € P-s-k A L Pj < L ai } 
select pj such that pj € CandidateSet and 

criticality(pj) = min{criticality(pf) | pi e CandidateSet 
A d{ < d upp i imit fc}} 
if no such pj exists then 

discontinue:^ true; 

{the user must increase the deadline upper limit of some 
P-s-k process in CandidateSet} 

else 

d Pj :=d Pj + 1; 
end; {while} 
end; {for} 

end. 
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A method and a simulation procedure for 
determining the response times of the A-s-k processes, 
for example a± follows: 

For all Oi € A-s-k: 

RE ai = c ai + DelayA(a <3 ii£y + DelayP(a i5 iLEJ ai ) + B(a;) 
where 

DelayA^-, RE^) = T, a ^A~h~k^A~s-h^<L ai Mi=i 

and 
and 

B(ai) = max{c aj \ (a, € A-s-k A L aj > 

A^XfaXk £ A-s-k: aj excludes Xk A L Xk < L^)} 

Note: In the above formula, the value of Cp- is the original computation time of pj (it does 
not include the time reserved for A-h-k-a processes with shorter deadlines). 

The following procedure can be used to compute the worst-case response time of each A-s-k 
process: 

i:= 0; 

failure— false; 

while i < number-of-A-s-k-processes and not (failure) do 
begin 

if ai G A-s-k 

then 

begin 

responsetimefound:= false; 

while not(responsetimefound) and not (failure) do 

begin 

REnewi = T>e]ayA{a i ,RE previmiSi ) + DdayPfo, JLE^,**,,.) + B( 0i ); 

if REpreviousi ~ REnewi 

then 
begin 

responsetimefound:= true; 

end 

if (RE neWi > responsetimelimit) 
then failures true 

end; 

end; 

i:= i + 1; 
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See Example 9 for concerning use of the above 
procedure . 

In the following description, the second method 
is described, which uses simulation to determine the 
5 worst-case response time of an A-s-k process. This 
method uses the functions of the A-h-k-a Scheduler and 
the Main Run-Time Scheduler, which are described 
earlier. 

A preferred method for computing the response 
10 time of an A-s-k process ai corresponding to a feasible 
pre-run-time schedule of guaranteed periodic processes 
comprising an initial part of the pre-run-time schedule 
S 0 (t 0 )/ in the interval {0, t 0 }; and a repeating part of 
the pre-run-time schedule S LC m (prd LC M) , in the interval 
15 {t0, t 0 + prd LC M} is as follows: 

fail:— false; 

for t s := 0 to to + W&LCM - 1 do 
begin 

Use the Main Run-Time Scheduler to schedule a\ under the 
following assumptions: 

(1) ai arrives in the system at time t s . 

(2) Let every A-h-k-a process aj arrive 

at the following instants in time: R a {k) = t s + k * iin a -, 
k = 0, 1, 2, . . . , L^-^-J , and be scheduled before 

{ all A-h-k-a processes arrive at the same time as ai at time i 55 and 
are put into execution before a^} 

(3) Let every A-s-k process aj, such that L aj < arrive 
at the following instants in time: R a Ak) = t a + k * rom a ., 

da ^ 

k = 0, 1, 2, . . . , l miT f a j , and be scheduled before a; whenever 
ai and aj have both arrived and ai has not yet started. 
{ all A-s-k processes whose latitudes are less than or equal to 
aj's latitude arrive at the same time as a t * at time t s , and 
are put into execution before a*.} 
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(4) Let A-s-k process aj 15 such that c ajl ~ max{c aj \(aj € A-s-k 
A L aj > A 3x k ,x k E A-s-k VZfc € P-g: aj excludes x k A L Xk < L ai )} 
axrive at the following instants in time: Ra h {k) = t s — 1 + k * min aji , 



{aj x arrives 1 time unit before ai at time t s -1 , and, 
if it can be put into execution at that time, it will block aj.} 



(5) If 3pf,pj € P-g As(pi) <t s < e(pf), then assume that 
5 '(Pf) = 5 (Pl) A e r (pi) — e{pi)\ {i.e., pi started at the beginning of 
its time slot and will complete its computation at the end of 
its time slot in the pre- run-time schedule that was computed 
using adjusted computation times.} 
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(6) If the end of the current instance of the 
repeating part of the pre-run-time schedule is reached, 
continue at the beginning of the next instance of the 
repeating part of the pre-run-time schedule. 

5 (7) If ai's computation is completed before its 

response time limit, then record the completion time of 
ai as its response time RE{a if t s ) , and exit from the 
current iteration of the loop for this value of t s , and 
start the next iteration for t s := t s + 1. 

10 (8) If ai T s response time limit is reached but 

a± has not yet completed its computation, then set 
fail:= true and exit from the procedure, 
end; 

if not fail then 
15 RE ai := max{RE(ai, t s ) i t s = 0, 1, . . . , LCM - 1}; 

It should be noted that while the above- 
described methods can be carried out in a software 
programmed processor, and have beed described with such 
20 a processor as an example, they, or one or more steps in 
the methods, can can alternatively be carried out by 
hardware such as gate arrays or by other fixed or 
programmable structures, or combinations of these 
structures . 

25 A processor can be any physical or virtual 

structure which can perform one or more functions. A 
processor can be a machine, a computer processor, a 
logic device, an organization, etc. A process can be 
any task or job that requires a finite amount of time tc 

30 complete on a certain processor. Computation time is 
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the amount of time that a process requires from start to 
completion on a certain processor. 

Figure 24 illustrates an example of a system on 
which the methods described herein can be carried out. 

5 Any of plural peripherals 1 provide input signals which 
require processing. For example, peripherals can be a 
keyboard, a signal from an emergency response telephone 
system, an alarm clock, a program running in background 
on a processor, a pipeline, etc. A memory 3 stores 

10 processes, e.g. series of instructions, for carrying out 
the various processes. The memory can be in the form of 
any storage structure, and can be, for instance a store 
for a series of electronic, pneumatic, hydraulic, etc. 
control signals for operating a plurality of industrial 

15 processes that require scheduling in accordance with the 
demands of the input signals. In one embodiment, the 
memory can be a hard random access memory and/or a disk 
drive of a computer, of well known form and the input 
signals can be electronic. In another embodiment, in 

20 the case in which the memory is in the form of 

industrial process structures, the input signals can be 
fluids, photons, objects, audio, data or other signals, 
etc, which are to be scheduled to be processed by the 
various industrial processes. 

25 The input signals and the memory are coupled to 

a processor 4 of any form with which the present 
invention can be operated, such a computer processor. 
The processor can be a single processor, or plural 
processor which can operate in accordance with Example 

30 14. The processor or processors have an output which is 
coupled to an output device or system 5, which receives 
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the output result of the operation of the processes by 
the processor. 

The memory preferably also has a portion 7 for 
storing a pre-run-time schedule, and a portion 9 for 
5 storing a run-time schedule for execution of the 
processes stored in the memory 3. 

In operation, the processor receives input 
signals which demand that processes stored in the memory 
3 (or which are received from other control or interrupt 

10 inputs, not shown) are executed. As described earlier 
in this specification, some of these processes can be 
periodic and some can be asynchronous* The processor, 
operating using an operating system stored in the memory 
3, obtains the characteristics of the various processes 

15 from the memory, and creates or simulates a pre-run-time 
schedule, then creates or simulates a run-time schedule 
which uses the pre-run-time schedule, as described 
earlier in this specification. It then executes the 
run-time schedule as described herein, providing an 

20 output to the output device or system. 

Figure 24A provides another example of a 
multiprocessor system on which the methods described 
herein can be carried out. The real-time system 
consists of a controlling system having two parts, a 

25 pre-run-time scheduling subsystem 10 and a run- time 
scheduling subsystem 11, and a controlled system 12. 
The controlled system 12 has data/control buses linking 
the various components. The controlled system 12 is 
comprised of a set of periodic processes pi, p2, pn, 

30 a set of asynchronous processes al, a2, ... aj, and one 
or more processors 13a, 13b, . . . 13m. Each processor 
13a - 13m may have local memory and shared memory. On 
each processor 13a - 13m the processes, either periodic 



153 



or asynchronous, may be executed. Each process can be a 
task that requires a finite amount of time to complete 
on a processor that may have memory resources. Examples 
of such processes include : a service routines that 
5 periodically monitors conditions on a physical system 
and sends a signal when the conditions meet a certain 
standard or a task that responds to random user 
initiated requests. Any of the processes can be a 
complete subsystem unto itself comprising a processor 

10 and a memory that requires the use of some services 
offered by controlled system 12 in order to execute 
other periodic or asynchronous processes. 

The pre-run-time scheduling subsystem 10 
consists of one or more processors 14 that are used to 

15 perform pre-run-time scheduling. The pre-run-time 
scheduling subsystem scheduler (not shown) acquires 
information about the periodic processes such as 
constraints, release time, deadline, offset, precedence, 
and exclusion relations. The scheduler then uses this 

20 information to determine whether each asynchronous 

process should be converted into a new periodic process 
or not. After converting any suitable subset of 
asynchronous processes into new periodic processes but 
before run-time of the processes, the pre-run-time 

25 scheduler constructs a pre-run-time schedule for all the 
periodic processes which satisfies all the constraints 
and relations defined on the periodic processes. The 
scheduler then makes this schedule available to the run- 
time scheduling subsystem 11. 

30 The run-time scheduling subsystem 11 consists of 

one or more processors 15 that are used to perform run- 
time scheduling of the periodic and asynchronous 
processes. The run-time scheduling subsystem 11 uses 
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the information 16 provided by the pre-run-time 
scheduler and stored in memory/ to schedule the 
processes for execution on processor (s) 15. The 
processors 13a - 13m in the controlled system 12 on 
which the periodic or asynchronous processes are 
executed may share memory and other resources. 
Consequently, it is important to to enforce exclusion 
relations on the execution of the processes to prevent 
more than one process from accessing a 

shared memory resource at the same time. The pre-run- 
time scheduling subsystem 10 and the run-time scheduling 
subsystem 11 work together to control the execution of 
all the processes in the controlled system 12. These 
two subsystems 10 and 11 guarantee that all the 
processes in the controlled system 12 are completed 
before their respective deadlines and that all the 
constraints and relations among the processes are 
satisfied* 

While Figure 24A shows the run-time scheduling 
subsystem 11 as being within the controlled system 12, 
this is not necessary for the proper working of the 
invention. The run-time scheduling subsystem 11 can be 
separate from the controlled system 12. 

Some applications of the present invention can 
be in aircraft flight control, plant process control, 
traffic control, communication systems, multimedia, 
signal control of the internet, electronic commerce, 
electronic buses, computer operation, etc. 

A person understanding the above-described 
invention may now conceive of alternative designs, using 
the principles described herein. All such designs which 
fall within the scope of the claims appended hereto are 
considered to be part of the present invention. 
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I claim: 



1. A method of scheduling on one or more 
processors, executions of both periodic and asynchronous 
5 real-time processes having hard or soft deadlines, 
comprising automatically generating a pre-run-time 
schedule comprising mapping from a specified set of 
periodic process executions to a sequence of time slots 
on one or more processor time axes, each of the time 
10 slots having a beginning time and an end time, reserving 
each one of the time slots for execution of one of the 
periodic processes, a difference between the end time 
and the beginning time of each of the time slots being 
sufficiently long that execution of all of the periodic 
15 processes, including satisfaction of predetermined 
constraints and relations comprising at least one of 
release time, worst-case computation time, period, 
deadline, deadline nature, offset and permitted range of 
offset constraints, and precedence and exclusion 
20 relations and criticality levels can be completed 

between the beginning time and end time of respective 
time slots, and executing the processes in accordance 
with the schedule during run-time of the processor. 

25 2. A method as defined in claim 1, including 

the step of converting at least one asynchronous process 
to a corresponding new periodic process prior to the 
mapping step, and mapping the new periodic process in a 
manner similar to mapping of other periodic processes. 

30 

3. A method as defined in claim 1, including 
the step of converting all asynchronous processes that 
can be contained without conflict in the time slots with 
periodic processes including new periodic processes 
35 converted from asynchronous processes, into new periodic 
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processes prior to the mapping step, and mapping all new 
periodic processes in a manner similar to mapping of 
other periodic processes. 

5 4. A method as defined in claim 3, including 

further executing all non-converted asynchronous 
processes during run-time of the processor at times 
which do not interfere with execution of processes 
contained in the pre-run-time schedule. 

10 

5. A method as defined in claim 1 including, 
following pre-run-time scheduling and during run-time of 
the processor, the step of scheduling executions of a 
specified set of periodic and asynchronous processes 

15 such that all known ones of said specified constraints 
and relations will always be satisfied, the specified 
constraints and relations further comprising, for 
asynchronous processes, at least one of worst-case 
computation time, deadline, deadline nature and minimum 

20 time between two consecutive requests, and beginning 
time and end time of every time slot reserved for every 
periodic process execution in the pre-run-time schedule. 

6. A method as defined in claim 3 including, 

25 following pre-run-time scheduling and during run-time of 
the processor, the step of scheduling executions of a 
specified set of periodic and asynchronous processes 
such that all known ones of said specified constraints 
and relations will always be satisfied, the specified 

30 constraints and relations further comprising, for 
asynchronous processes, at least one of worst-case 
computation time, deadline, deadline nature and minimum 
time between two consecutive requests, and beginning 
time and end time of every time slot reserved for every 

35 periodic process execution in the pre-run-time schedule. 
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7. A method as defined in claim 1, including 
scheduling, within the pre-run-time schedule, said 
difference between the end time and the beginning time 
5 of each of said periodic time slots with sufficient time 
capacity for execution of all asynchronous processes 
that have less latitude than considered ones of periodic 
processes in meeting their respective deadlines. 

10 8 . A method as defined in claim 3, including 

scheduling, within the pre-run-time schedule, said 
difference between the end time and the beginning time 
of each of said periodic time slots with sufficient time 
capacity for execution of all unconverted asynchronous 

15 processes that have less latitude than latitude than 
considered ones of periodic processes in meeting their 
respective deadlines . 

9. A method for automatically adjusting lengths 
20 of periods of a predetermined set of periodic processes, 

comprising storing and sorting a list of reference 
periods, setting the length of the period of each 
periodic process to the length of the largest reference 
period that is no larger than an original period of the 
25 periodic process to form adjusted periods, and storing 
the adjusted periods for subsequent use in scheduling 
executions of the periodic processes. 

10. A method as defined in claim 1, including 
30 prior to the mapping step, automatically adjusting 

lengths of periods of a predetermined set of periodic 
processes, by storing and sorting a list of reference 
periods, setting the length of the period of each 
periodic process to the length of the largest reference 
35 period that is no larger than an original period of the 
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periodic process to form adjusted periods, and storing 
the adjusted periods for subsequent use in pre-run-time 
scheduling of executions of the periodic processes. 

5 11. A method as defined in claim 8, including 

prior to the mapping step, automatically adjusting 
lengths of periods of a predetermined set of periodic 
processes by storing and sorting a list of reference 
periods, setting the length of the period of each 

10 periodic process to the length of the largest reference 
period that is no larger than an original period of the 
periodic process to form adjusted periods, and storing 
the adjusted periods for subsequent use in pre-run-time 
scheduling of executions of the periodic processes. 

15 

12. A method as defined in claim 9, including 
setting the length of each reference period to be equal 
to the product of n powers, the base of each of the n 
powers being a distinct prime number, the n bases of the 
20 n powers being the first and smallest n prime numbers, 
the exponent of each of the n powers being bounded by an 
exponent upperbound, the sorted list of reference 
periods including every product of every said n powers. 

25 13. A method as defined in claim 12, including 

controlling tradeoff between differences between 
original period lengths and the adjusted period lengths, 
and the length of a least common multiple of the 
adjusted period lengths, by values of the n exponent 

30 upperbounds and the value of n. 

14. A method as defined in claim 1 including, 
prior to generating the pre-run-time schedule, 
determining whether each hard deadline asynchronous 
35 process should or should not be converted into a new 
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periodic process, and then converting a subset of a 
predetermined set of asynchronous processes having a 
worst-case computation time, minimum time between two 
requests characteristics and hard deadline constraints, 

5 which have been determined to be convertible, into a set 
of new periodic processes having release time, worst- 
case computation time, period, hard deadline, and 
permitted range of offset constraints, and reducing 
possible timing conflicts with other hard deadline 

10 periodic or hard deadline asynchronous processes with 
less latitude in meeting their deadlines, by taking into 
consideration the computation time requirements of the 
latter processes when determining the deadline of the 
new periodic process, 

15 

15. A method as defined in claim 1 including, 
prior to generating the pre-run-time schedule, 
determining whether each hard deadline asynchronous 
process should or should not be converted into a new 

20 periodic process, and then converting a subset of a 
predetermined set of asynchronous processes having a 
worst-case computation time, minimum time between two 
requests characteristics and hard deadline constraints 
which have been determined to be convertible, into a set 

25 of new periodic processes having release time, worst- 
case computation time, period, hard deadline, and 
permitted range of offset constraints, wherein a 
permitted range of offset of the new periodic process 
being is a subinterval of an interval or a full interval 

30 that begins at a predetermined start time, and ends at a 
time equal to the sum of the earliest time that an 
asynchronous process can make a request for execution 
plus the period length of the new periodic process minus 
one time unit. 
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16. A method as defined in claim 14, in which 
the determining step is performed by calculating whether 
a ratio of processing capacity of the processor which is 
required to be reserved for new periodic processes, to 

5 processor capacity that is required for the asynchronous 
process if left unconverted, exceeds a predetermined 
threshold value. 

17. A method as defined in claim 1, including 
10 generating the pre-run-time schedule as a feasible two- 
part pre-run-time-schedule for execution of periodic 
processes that may have non-zero offsets (a) an initial 
part which may be of zero length, and (b) a repeating 
part having length which is equal to a least common 

15 multiple of lengths of all the periods of the periodic 
processes, 

all executions of all periodic processes within 
a time interval of length equal to the length of the 
least common multiple of the periodic process periods 

20 being included in the repeating part of the pre-run-time 
schedule, wherein all said specified constraints and 
relations being satisfied for all executions of all 
periodic processes within both said initial part and 
said repeating part, and 

25 using any offset value in a permitted range of 

offsets of each periodic process, including any offset 
value in the permitted range of offsets of any new 
periodic process that may have been converted from an 
asynchronous process, to generate said feasible pre-run- 

30 time schedule. 

18. A method as defined in claim 1, including 
generating the pre-run-time schedule as a feasible two- 
part pre-run-time schedule on one or more processors for 
35 execution of periodic processes that may have non-zero 
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offsets (a) an initial part which may be of zero length, 
and (b) a repeating part having length which is equal to 
a least common multiple of lengths of all the periods of 
the periodic processes, 

5 all executions of all periodic processes within 

a time interval of length equal to the length of the 
least common multiple of the periodic process periods 
being included in the repeating part of the pre-run-time 
schedule, wherein all said specified constraints and 

10 relations being satisfied for all executions of all 
periodic processes within both said initial part and 
said repeating part, and 

using any offset value in a permitted range of 
offsets of each periodic process, including any offset 

15 value in the permitted range of offsets of any new 
periodic process that may have been converted from an 
asynchronous process, to generate said feasible pre-run- 
time schedule. 

20 19. A method as defined in claim 1, including 

generating the pre-run-time schedule as a feasible two- 
part pre-run-time schedule on one or more processors for 
execution of periodic processes that may have non-zero 
offsets (a) an initial part which may be of zero length, 

25 and (b) a repeating part having length which is equal to 
a least common multiple of lengths of all the periods of 
the periodic processes, 

all executions of all periodic processes within 
a time interval of length equal to the length of the 

30 least common multiple of the periodic process periods 
being included in the repeating part of the pre-run-time 
schedule, wherein all said specified constraints and 
relations being satisfied for all executions of all 
periodic processes within both said initial part and 

35 said repeating part, and 
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using any offset value in a permitted range of 
offsets of each periodic process, including any offset 
value in the permitted range of offsets of any new 
periodic process that may have been converted from an 
5 asynchronous process, to generate said feasible pre-run- 
time schedule. 

20, A method as defined in claim 17, including 
generating said pre-run-time schedule on a plurality of 

10 processors. 

21. A method as defined in claim 14, including 
generating the pre-run-time schedule as a feasible two- 
part pre-run-time-schedule for execution of periodic 

15 processes that may have non-zero offsets (a) an initial 
part which may be of zero length, and (b) a repeating 
part having length which is equal to a least common 
multiple of lengths of all the periods of the periodic 
processes, 

20 all executions of all periodic processes within 

a time interval of length equal to the length of the 
least common multiple of the periodic process periods 
being included in the repeating part of the pre-run-time 
schedule, wherein all said specified constraints and 

25 relations being satisfied for all executions of all 
periodic processes within both said initial part and 
said repeating part, and 

using any offset value in a permitted range of 
offsets of each periodic process, including any offset 

30 value in the permitted range of offsets of any new 

periodic process that was converted from an asynchronous 
process, to generate said feasible pre-run-time 
schedule. 

35 22. A method as defined in claim 21, including 
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generating said feasible pre-run-time schedule on one or 
more processors. 

23. A method as defined in claim 21, further 

5 including the steps of generating the pre-run-schedule 
by constructing a schedule for all executions of the 
periodic processes within an interval starting from zero 
and having length equal to maximum offset value plus a 
bounded number of times of the length of a least common 

10 multiple of the periodic process periods , conditions for 
determining feasibility requiring the existence of a 
point in the pre-run-time schedule wherein starting from 
the latter point the schedule repeats in subschedule 
interval lengths equal to a least common multiple of 

15 lengths of all the periodic process periods, timing of 
all executions of all periodic processes within a time 
interval having length equal to the length of the least 
common multiple of the periodic process periods being 
included in each said repeating subschedule interval, 

20 and including satisfaction of all predetermined 

constraints and relations for all executions of all 
periodic processes within the subschedule interval 
starting from time zero and ending at said point plus 
the length of the least common multiple of the periodic 

25 process periods in the schedule. 

24. A method as defined in claim 23, including 
generating said pre-run-time schedule on a plurality of 
processors . 

30 

25. A method as defined in claim 1, including 
generating the pre-run-time schedule on one or more 
processors as a feasible two-part pre-run-time-schedule 
for execution of periodic processes that may have non- 
35 zero offsets (a) an initial part which may be of zero 
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length, and (b) a repeating part having length which is 
equal to a least common multiple of lengths of all the 
periods of the periodic processes, 

all executions of all periodic processes within 

5 a time interval of length equal to the length of the 
least common multiple of the periodic process periods 
being included in the repeating part of the pre-run-time 
schedule, wherein all said specified constraints and 
relations being satisfied for all executions of all 

10 periodic processes within both said initial part and 
said repeating part, and 

using any offset value in a permitted range of 
offsets of each periodic process, including any offset 
value in the permitted range of offsets of any new 

15 periodic process that may have been converted from an 
asynchronous process, to generate said feasible pre-run- 
time schedule. 

20 26. A method as defined in claim 1, further 

comprising the steps of: 

(a) generating feasible said-run-time schedule for 
the execution of a set of hard deadline periodic 
processes, and of a set of soft deadline periodic 

25 processes, 

(b) assigning a criticality level and a deadline 
upper-limit to each soft deadline periodic process, 

(c) in the case of not finding a feasible pre-run- 
time schedule under said constraints and relations, 

30 identifying a soft critical set that contains soft 
deadline periodic processes for which modifying the 
deadlines of one or more processes in said soft critical 
set is necessary to meet the deadlines of all hard 
deadline processes, 

35 (d) repeatedly selecting one process with a lowest 
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criticality level among processes for which its 
criticality level has not reached the deadline upper- 
limit in the soft critical set in each case in which a 
feasible pre-run-time schedule has not been found, 

5 increasing the deadline of the selected process by an 
amount that does not exceed the deadline upper-limit of 
the selected process and repeatedly attempting to find a 
feasible pre-run-time schedule until either a feasible 
pre-run-time schedule is found or all the deadline 

10 upper-limits of processes in the soft critical set have 
been reached without finding a feasible schedule, and 
indicating the event of either the inability of finding 
a feasible schedule or of finding a feasible pre-run- 
time schedule, and indicating the critical set when 

15 unable to find a feasible schedule, 

(d) recomputing worst-case response times of all 

hard deadline asynchronous processes after a feasible 
pre-run-time schedule has been found for all hard and 
soft deadline periodic processes, and in every event 

20 that the worst-case response time exceeds the deadline 
of a hard deadline asynchronous process, repeatedly 
selecting one process that has a lowest criticality 
level among all soft deadline periodic processes that 
contribute to the worst-case response time of the 

25 asynchronous process and increasing the deadline of the 
selected soft deadline periodic process until either (i) 
the worst-case response time of every hard deadline 
asynchronous process is less than or equal to its 
deadline or (ii) all the deadline upper limits of the 

30 set of soft deadline periodic processes that contribute 
to the worst-case response time of some hard deadline 
asynchronous process that exceeds the deadline of said 
asynchronous process have been reached, and indicating 
the event of the latter events (i) or (ii) and the set. 
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27. A method as defined in claim 1, further 
comprising, during run-time: 

(a) detecting, at any predetermined time, whether 
there exists a possibility that immediate execution of a 

5 particular hard deadline asynchronous process may cause 
the execution of any periodic process with less latitude 
in meeting a deadline of the latter periodic process as 
compared with latitude of meeting the deadline of the 
particular hard deadline asynchronous process which is 

10 to be delayed beyond a predetermined time limit, even if 
the periodic process is not ready for execution at said 
any predetermined time, and 

(b) delaying execution of the hard deadline 
asynchronous process if said possibility is found to 

15 exist, even if said possibility is the only reason for 
delaying the execution of said asynchronous process at 
said any time, and even if the delay will cause the 
processor to be in an idle state for a time interval of 
non-zero length beginning from said any time, 

20 

28. A method as defined in claim 1, further 
comprising, during run-time: 

(a) detecting, at any predetermined time, whether 
there exists a possibility that immediate execution of a 

25 particular hard deadline asynchronous process may cause 
the execution of any periodic process with less latitude 
in meeting a deadline of the latter periodic process as 
compared with latitude of meeting the deadline of the 
particular hard deadline asynchronous process which is 

30 to be delayed beyond the end of the time slot of the 
periodic process in the pre-run-time schedule, even if 
the periodic process is not ready for execution at said 
any predetermined time, and 

(b) delaying execution of the hard deadline 

35 asynchronous process if said possibility is found to 
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exist, even if said possibility is the only reason for 
delaying the execution of said asynchronous process at 
said any time, and even if the delay will cause the 
processor to be in an idle state for a time interval of 
5 non-zero length beginning from said any time, 

29. A method as defined in claim 1, further 
comprising, during run-time: 

(a) detecting, at any predetermined time, whether 

10 there exists a possibility that immediate execution of a 
particular hard deadline asynchronous process may cause 
the execution of the asynchronous process, or the 
execution of some other asynchronous process, to extend 
beyond the beginning of the time slot of the periodic 

15 process in the pre-run-time schedule, even if the 

periodic process is not ready for execution of said any 
predetermined time, and 

(b) delaying execution of the hard deadline 
asynchronous process if said possibility is found to 

20 exist, even if said possibility is the only reason for 
delaying the execution of said asynchronous process at 
said any time, and even if the delay will cause the 
processor to be in an idle state for a time interval of 
non-zero length beginning from said any time. 

25 

30. A method as defined in claim 27, including 
carrying out the method on a plurality of processors. 

31. A method as defined in claim 29, including 
30 carrying out the method on a plurality of processors. 

32. A method as defined in claim 1, further 
comprising, during run-time: 

(a) detecting, at any predetermined time, whether 

35 there exists a possibility that immediate execution of a 
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particular hard deadline asynchronous process may cause 
the execution of any periodic process to be delayed 
beyond the end of the time slot of that periodic process 
in the pre-run-time schedule, even if the periodic 
5 process is not ready for execution at said any 
predetermined time, and 

(b) delaying execution of the hard deadline 
asynchronous process if said possibility is found to 
exist, even if said possibility is the only reason for 
10 delaying the execution of said asynchronous process at 
said any time, and even if the delay will cause the 
processor to be in an idle state for a time interval of 
non-zero length beginning from said any time. 

15 33. A method as defined in claim 32, including 

carrying out the method on a plurality of processors. 

34. A method as defined in claim 1, further 
comprising, during run-time: 
20 (a) detecting, at any predetermined time, whether 

there exists a possibility that immediate execution of a 
particular first hard deadline asynchronous process may 
cause execution of any second hard deadline asynchronous 
process to be continuously blocked for a duration of the 

25 execution of the first asynchronous process and a 

duration of the execution of any periodic process, when 
the second asynchronous process has less latitude in 
meeting the deadline of the second asynchronous process 
as compared with the latitude of both the first 

30 asynchronous process in meeting the deadline of the 
first asynchronous process and the latitude of the 
periodic process in meeting the deadline of the periodic 
process, even if neither the periodic process nor the 
second asynchronous process are ready for execution at 

35 the predetermined time, and 
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(b) delaying execution of the first hard deadline 
asynchronous process if said possibility is found to 
exist, even if said possibility is the only reason for 
delaying the execution of the first asynchronous process 
5 at said any predetermined time, and even if the delay 
will cause the processor to be in an idle state for a 
time interval of non-zero length beginning from said any 
predetermined time. 

10 35. A method as defined in claim 34 including 

carrying out the method on a plurality of processors. 

36. A method as defined in claim 1 comprising 
during run-time, detecting at least one event of, at any 

15 point in time, whether some asynchronous process has 
arrived by said point in time, if some asynchronous 
process or periodic process has completed its 
computation at said point in time, and if said point in 
time is both the release time and beginning time of a 

20 time slot in the pre-run-time schedule for some periodic 
process, and activating a run-time scheduler at said 
point in time, and should said at least one event have 
occurred, determining whether each asynchronous process 
that has arrived but has not yet been completed should 

25 be delayed or immediately put into execution, and at 
least one of the further steps: 

(a) delaying execution of a hard deadline first 
asynchronous process when the execution of some other 
hard deadline asynchronous or periodic process which 

30 excludes the first asynchronous process has already 
started by has not yet been completed, 

(b) delaying execution of a hard deadline first 
asynchronous process when execution of some other hard 
deadline asynchronous or periodic process which has less 

35 or equal latitude compared with the latitude of the 
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first asynchronous process in meeting their respective 
deadlines has already started but has not yet been 
completed, 

(c) delaying execution of a hard deadline first 

5 asynchronous process when execution of some other hard 
deadline first asynchronous process that excludes a 
periodic process with less or equal latitude as compared 
with the latitude of the first asynchronous process in 
meeting their respective deadlines has already started 

10 but has not yet been completed, 

(d) delaying execution of a hard deadline 
asynchronous process in the event there exists the 
possibility that immediate execution of the latter hard 
deadline asynchronous process may cause execution of a 

15 first periodic process with less or equal latitude to be 
delayed, when execution of the first periodic process 
may be preempted by execution of some second periodic 
process, and the latter hard deadline asynchronous 
process cannot be preempted by the second periodic 

20 process, 

(e) delaying execution of a hard deadline 
asynchronous process when it is not allowed to preempt 
execution of any first process that excludes some other 
second hard deadline asynchronous process which has 

25 latitude that is less than both said any first process 
and the latitude of said second asynchronous process, 
whereby blocking of the second asynchronous process by 
the duration of more than execution of processes with 
greater latitude thereof may be avoided, 

30 (f) delaying execution of a hard deadline 

asynchronous process to allow preemption of execution of 
the asynchronous process by execution of a first 
periodic process that has latitude less than or equal to 
the latitude of the asynchronous process, when the 

35 asynchronous process does not exclude the first periodic 
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process and does not exclude any other asynchronous 
process with a latitude that is less than the latitude 
of the first periodic process, and there does not exist 
execution of some second periodic process that has not 
5 been completed such that execution of the second 
periodic process is ordered before execution of the 
first periodic process and execution of the time slot of 
the first periodic process is not nested within the time 
slot of the second periodic process in the pre-run-time 
10 schedule, and 

(g) selecting, among all hard deadline asynchronous 

processes that have already arrived and are not yet 
completed and are not delayed, a process which has the 
least latitude for immediate execution, wherein if more 
15 than one process is selected, further selecting a 

process among them with a smallest index for immediate 
execution. 

37. A method as defined in claim 1, comprising 
20 during run-time, detecting, in a case in which no hard 
deadline asynchronous process or periodic process that 
has started is to be immediately put into execution, 
conditions of whether there exists an execution of some 
first periodic process that is ready for execution and 

25 has not completed execution, and there does not exist 
any other execution of some second periodic process that 
has not yet completed, such that execution of the second 
periodic process is ordered before execution of the 
first periodic process in the pre-run-time schedule, and 

30 the time slot of the first periodic process is not 
nested within the time slot of the second periodic 
process in the pre-run-time schedule, and there does not 
exist any other execution of some third periodic process 
that is ready and has not completed execution, such that 

35 execution of the third periodic process is nested within 
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the time slot of the first periodic process in the pre- 
run-time schedule, and beginning execution of the first 
periodic process immediately in the event said 
conditions are true. 

5 

38. A method as defined in claim 1, comprising 
during run-time, detecting the conditions in a case in 
which no hard deadline asynchronous process or periodic 
process that has started is to be immediately put into 

10 execution, whether there exists a soft deadline first 
asynchronous process with known characteristics that is 
ready and has not completed execution, and that there 
does not exist any other second process such that the 
second process excludes the first process or the first 

15 process excludes some third process such that the third 
process has a latitude that is less than the latitudes 
of both the first process and the second process, and 
execution of the second process has started but has not 
been completed, and in the event the conditions are 

20 true, selecting among all such first soft deadline 
asynchronous processes with known characteristics a 
process that has the shortest deadline, and in the event 
among such processes there are some processes that have 
already started, then selecting a process among them 

25 which has already started for immediate execution. 

39. A method as defined in claim 1, comprising 
during run-time, detecting the conditions, in a case in 
which no hard deadline asynchronous process or periodic 

30 process that has started, or periodic process that is 
ready, or soft deadline asynchronous process with known 
characteristics that is ready for execution, is to be 
immediately put into execution, whether there exists a 
soft deadline first asynchronous process with unknown 

35 characteristics that is ready and has not completed 
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execution, and that there does not exist any other 
second process such that the second process excludes the 
first process or the first process excludes some third 
process such that the third process has a latitude that 

5 is less than the latitudes of both the first process and 
the second process, and the execution of the second 
process has started but has not been completed, and in 
the event the conditions are true then selecting among 
all such first soft deadline asynchronous processes with 

10 unknown characteristics, a process that has the shortest 
deadline, and if among such processes there are some 
that have already started, then selecting a process 
among them that has already started for immediate 
execution. 

15 

40. A method as defined in claim 1, including, 
for use in generating the pre-run-time schedule, 
determining a worst-case response time of each hard 
deadline asynchronous process that has not been 
20 converted into a periodic process using a formula 
comprising: 

the sum of all worst-case computation times of 
all asynchronous processes and periodic processes that 
have less or equal latitude as compared with the 
25 latitude of the asynchronous in meeting their respective 
deadlines, 

plus the maximum time that the asynchronous 
process may possibly be blocked by some asynchronous or 
periodic process that has greater latitude as compared 
30 with the latitude of the asynchronous process in meeting 
their respective deadlines, 

plus the worst-case computation time of the 
asynchronous process multiplied by the number of 
periodic processes with which the asynchronous process 
35 has an exclusion relation. 
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41. A method as defined in claim 1, including, 
during a pre-run-time phase, determining by simulation a 
worst-case response time of each hard deadline 

5 asynchronous process corresponding to a feasible pre- 
run-time schedule of periodic processes consisting of an 
initial part of the pre-run-time schedule and a 
repeating part of the pre-run-time schedule, wherein for 
each point in time from zero to the end time of the 

10 repeating part of the run-time schedule minus one time 
unit, simulating execution of the asynchronous process 
using functions used to determine a run-time schedule 
and recording response time of the asynchronous process 
under the assumption that the asynchronous process 

15 starts at a point in time under consideration, all other 
asynchronous processes that can possibly block the 
asynchronous process arriving at one time unit prior to 
the point in time under consideration, and all 
asynchronous processes that have deadlines that are 

20 shorter than the deadline of the asynchronous process 
arriving at the same said point of time under 
consideration, scheduling executions of periodic 
processes to start at the beginning time and to complete 
execution at the end time of their respective time slots 

25 in the pre-run-time schedule, wherein whenever the 
asynchronous process is delayed because it may block 
execution of some periodic process having less latitude 
than the latitude of the asynchronous process, or may 
block execution of some second asynchronous process for 

30 the duration of more than one execution of processes 

having greater latitude as compared with the latitude of 
the second asynchronous process, all asynchronous 
processes having less latitude as compared with the 
latitude of the asynchronous process is delayed in order 
35 to delay the asynchronous process for a maximum possible 
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amount of time, thus simulating all possible worst-case 
scenarios of executions of the asynchronous process. 

42. A method as defined in claim 1, including, 
5 during a pre-run-time phase, restricting every periodic 

process to be executed strictly within its time slot in 
the pre-run-time schedule by changing release time of 
execution of each periodic process to be equal to the 
beginning time of the time slot reserved for execution 
10 of the periodic process. 

43. A method as defined in claim 1, including, 
during a pre-run-time phase, generating tables of safe 
start time intervals for the executions of hard deadline 

15 asynchronous processes, wherein every periodic process 
is scheduled to be executed strictly within its time 
slot in the pre-run-time schedule, by changing the 
release time of execution of each periodic process to be 
equal to the beginning time of the time slot reserved 

20 for execution of the periodic process, wherein for every 
point in time of the pre-run-time schedule, it is 
determined whether each asynchronous process should be 
delayed, under the assumption that the actual start time 
of execution of every periodic process is equal to the 

25 beginning time of its time slot, and the actual end time 
of execution of every periodic process is equal to the 
end time of its time slot, wherein for every point in 
time of the pre-run-time schedule, in the event the hard 
deadline asynchronous process is to be delayed according 

30 the assumptions, the point in time is set to be unsafe 
and recorded in a corresponding entry in the table for 
the point in time and the asynchronous process. 

44. A method as defined in claim 1, including, 
35 during a pre-run-time phase, determining a worst-case 
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response time of each soft deadline asynchronous process 
for which worst-case computation time, deadline and 
minimum time between two requests are known before run- 
time and that has not been converted into a periodic 

5 process, using a formula: 

the sum of all worst-case computation times of 
all asynchronous processes that have less or equal 
latitude as compared with the latitude of the 
asynchronous process in meeting their respective 

10 deadlines, 

plus the sum of all worst-case computation times 
of all periodic processes, 

plus the maximum time that the asynchronous 
process may possibly be blocked by some asynchronous 
15 process that has greater latitude as compared with the 
latitude of the asynchronous process in meeting their 
respective deadlines . 

45. A method as defined in claim 1, including, 

20 during a pre-run-time phase, determining by simulation a 
worst-case response time of each soft deadline 
asynchronous process for which the worst-case 
computation time, deadline, and minimum time between two 
requests are known before run-time, corresponding to a 

25 feasible pre-run-time schedule of periodic processes 
consisting of an initial part of the pre-run-time 
schedule and a repeating part of the pre-run-time 
schedule, wherein for each point in time from zero to an 
end time of the repeating part of the pre-run-time 

30 schedule minus one time unit, and simulating the 

execution of the asynchronous process using functions 
which are used in determining a run-time schedule and 
recording the response time of the asynchronous process 
under the assumption that the asynchronous process 

35 starts at the point in time and that all other soft 
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deadline asynchronous processes that can possibly block 
the asynchronous process arrive at one time unit prior 
to the point in time, and all soft deadline asynchronous 
processes that have deadlines which are shorter than the 

5 deadline of the asynchronous process and all hard 

deadline asynchronous processes arrive at the same point 
in time, all executions of periodic processes starting 
at the beginning time and completing at the end time of 
their respective time slots in the pre-run-time 

10 schedule, thus simulating all possible worst-case 
scenarios of executions of the asynchronous process. 

46. A method as defined in claim 1, including, 
during a pre-run-time phase, generating tables of safe 

15 start time intervals for the executions of hard deadline 
asynchronous processes, wherein every periodic process 
is scheduled to be executed strictly within its time 
slot in the pre-run-time schedule, by changing the 
release time of execution of each periodic process to be 

20 equal to the beginning time of the time slot reserved 
for execution of the periodic process, wherein for 
selected points in time of the pre-run-time schedule, it 
is determined whether each asynchronous process should 
be delayed, under the assumption that the actual start 

25 time of execution of every periodic process is equal to 
the beginning time of its time slot, and the actual end 
time of execution of every periodic process is equal to 
the end time of its time slot, wherein for selected 
points in time of the pre-run-time schedule, in the 

30 event the hard deadline asynchronous process is to be 
delayed according the assumptions, that point in time is 
set to be unsafe and recorded in a corresponding entry 
in the table for the point in time and the asynchronous 
process . 
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47. A method as defined in claim 46, in which 
the selected points in time are every point in time. 

48. A method as defined in claim 1, including, 

5 during a pre-run-time phase, determining by simulation a 
worst-case response time of each soft deadline 
asynchronous process for which the worst-case 
computation time, deadline, and minimum time between two 
requests are known before run-time, corresponding to a 

10 feasible pre-run-time schedule of periodic processes 
consisting of an initial part of the pre-run-time 
schedule and a repeating part of the pre-run-time 
schedule, wherein for selected points in time from zero 
to an end time of the repeating part of the pre-run-time 

15 schedule minus one time unit, simulating the execution 
of the asynchronous process using functions which are 
used in determining a run-time schedule and recording 
the response time of the asynchronous process under the 
assumption that the asynchronous process starts at the 

20 selected point in time and that all other soft deadline 
asynchronous processes that can possibly block the 
asynchronous process arrive at one time unit prior to 
the selected point in time, and all soft deadline 
asynchronous processes that have deadlines which are 

25 shorter than the deadline of the asynchronous process 
and all hard deadline asynchronous processes arrive at 
the same point in time, all executions of periodic 
processes starting at the beginning time and completing 
at the end time of their respective time slots in the 

30 pre-run-time schedule, thus simulating all possible 
worst-case scenarios of executions of the asynchronous 
process . 

49. A method as defined in claim 48, in which 
35 the selected points in time are every point in time. 
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50, A method of processing a plurality of 
processes, some of which are periodic and some of which 
are asynchronous, comprising: 
5 (i) prior to executing the processes on a processor: 

(a) determining which asynchronous processes 
have less flexibility in meeting their deadlines than 
any of the periodic processes, 

(b) adding the execution time of each of the 
10 less flexible asynchronous processes to the execution 

time of each of the periodic periodic processes, 

(c) scheduling each of the periodic processes 
into time slots, 

(ii) and during run-time of the processor: 
15 (d) executing the periodic processes according 

to the schedule, interrupting any periodic process to 
execute an of said less flexible asynchronous processes 
for which a request to execute has been received by the 
processor, 

20 (e) on receiving a request to execute an 

asynchronous process which has greater or equal 
flexibility in meeting their deadlines than any of the 
periodic processes, scheduling the requesting 
asynchronous process at a time which will not conflict 

25 with execution and completion of any of the periodic 
processes, and 

(f) execute the scheduled latter asynchronous 
process at its scheduled time. 

30 51. A method as defined in claim 50, including 

the step of converting at least one asynchronous process 
to a new periodic process prior to step (i) (a) in the 
event that a ratio of processor capacity which needs to 
be reserved for executing the new periodic process, to 

35 the processor capacity which needs to be reserved for 
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the asynchronous process if unconverted, exceeds a 
predetermined value, and the step of otherwise treating 
each new periodic process in a similar manner to other 
periodic processes. 

5 

52. A method of processing a plurality of 
processes, some of which are periodic and some of which 
are asynchronous, comprising: 

(i) prior to executing the processes on a processor: 
10 (a) determining which asynchronous processes 

have less flexibility in meeting their deadlines than 
any of the periodic processes, 

(b) adding the execution time of each of the 
less flexible asynchronous processes to the execution 

15 time of each of the periodic processes, 

(c) scheduling each of the periodic processes 
into time slots, 

(d) converting each asynchronous process which 
has greater or equal flexibility in meeting their 

20 deadlines than any of the periodic processes into a new 
periodic process, and scheduling the new periodic 
process at a time which will not conflict with execution 
and completion of any of the other periodic processes, 

(ii) and during run-time, 

25 (e) executing the periodic and new periodic 

processes, interrupting any of the periodic and new 
periodic processes to processes any of the less flexible 
asynchronous processes for which a request to execute 
may be received at any time. 

30 

53. A method as defined in claim 52, including 
the step of converting at least one asynchronous process 
to a new periodic process prior to step (i) (a) in the 
event that a ratio of processor capacity which needs to 
35 be reserved for executing the new. periodic process, to 
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the processor capacity which needs to be reserved for 
the asynchronous process if unconverted, exceeds a 
predetermined value, and the step of otherwise treating 
each new periodic process in a similar manner to other 
5 periodic processes. 

54. A method as defined in claim 50, including 
adding the execution time of each of the less flexible 
asynchronous processes to the execution time of each of 

10 the periodic processes which has greater or equal 

flexibility in meeting their deadlines than any of the 
periodic processes, interrupting the scheduled latter 
asynchronous process to process any of the less flexible 
asynchronous processes for which a request to execute 

15 may be received at any time. 

55. A method as defined in claim 51, including 
adding the execution time of each of the less flexible 
asynchronous processes to the execution time of each of 

20 the periodic processes which has greater or equal 

flexibility in meeting their deadlines than any of the 
periodic processes, interrupting the scheduled latter 
asynchronous process to process any of the less flexible 
asynchronous processes for which a request to execute 

25 may be received at any time. 

56. A method of scheduling execution of 
processes by a processor comprising: 

(a) scheduling periodic time slots for all periodic 
30 processes which time slots each include time for each of 

the periodic processes and time for all asynchronous 
processes which have less flexibility in meeting their 
deadlines than do the periodic processes, 

(b) determining worst case response times of all 
35 other processes, 
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(c) construct a schedule which includes the periodic 
time slots and sufficient intervening time to process 
said all other processes, and 

(d) execute the processes in accordance with the 

5 schedule and as said all other processes are required to 
be processed from time to time, 

57. A method of scheduling execution of 
processes in a processor, wherein the processes may be 
10 periodic having at least one of 

(a) hard deadlines with known characteristics 

(phk) , 

(b) soft deadlines with known characteristics 

(psk) , 

15 and may be asynchronous having at least one of 

(c) hard deadlines (ahk) , or 

(d) soft deadlines (ask) 
comprising: 

A. in a first pre-run-time off-line phase: 

20 I. dividing ahk processes into two subsets ahkp 

and ahka, 

1. converting the ahkp processes into new 
periodic processes in the event that a ratio of 
processor capacity that needs to be reserved for the new 

25 periodic process, to the processor capacity that needs 
to be reserved for the ahkp process if unconverted, 
exceeds a predetermined threshold, and if not, 
designating the ahkp process as an ahka process, 

2. retaining akha processes as asynchronous, 
30 (i) reserving enough time in the new 

periodic processes deadline to accommodate times of all 
periodic and asynchronous processes that have less 
latitude in meeting their deadlines, thereby to allow 
said processes that have less latitude to preempt a new 
35 periodic process if possible at run-time, 



28 



(ii) reserving processor capacity for 
ahka processes by adding computation time of each ahka 
process to computation time of every periodic process 
that has greater flexibility in meeting its deadline 
5 than of the ahka process, thereby to allow each ahka 
process to preempt execution of any such periodic 
process which has the greater flexibility if possible at 
the run-time, 

II. 1. determining the schedulability of all phk 
10 processes having known characteristics and new periodic 

processes converted from ahkp processes, 

2. constructing a pre-run-time schedule in 
which one or more time slots are reserved for execution 
of every phk process and every new periodic process 
15 converted from one ahkp process, wherein a time slot 
reserved for a phk process includes time reserved for 
execution of all ahka processes that have less 
flexibility in meeting their deadlines than the phk 
process, 

20 3. adjusting the lengths of time slot periods 

by predetermined parameters for controlling balance 
between a utilization level and length of a pre-run-time 
schedule, 

III. l. determining worst case response times of 
25 all ahka processes, 

2. verifying schedulability of each ahka 
process by checking whether its deadline is greater or 
equal to its worst-case response time, 

IV. 1. determining the schedulability of all psk 
30 processes, while maintaining the previously determined 

schedulability of all phk and ahka processes, 

2. reconstructing a pre-run-time schedule in 
which one or more time slots are reserved for execution 
of every phk process including every new phk process 
35 converted from an ahka process, for every psk process, 
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and for execution of all ahka processes that have 
deadlines that are shorter than deadlines of the phk or 
psk process and thus may preempt execution of the phk or 
psk process, 

5 3. determining, again, worst case response 

time of all ahka processes, 

V. determining worst case response time of the 
ask processes, 

VI. constructing a feasible pre-run-time 

10 schedule for all the periodic processes with known 
characteristics, and determining worst-case response 
time of all asynchronous processes with known 
characteristics, 

B. and in a following run-time on-line phase, 

15 1.1. scheduling execution of the periodic and 

asynchronous processes so as to guarantee that execution 
of every periodic process will be completed before 
ending of the time slot containing the periodic process 
in the feasible pre-run-time schedule, and to guarantee 
20 that execution of all asynchronous processes having soft 
deadlines and known characteristics is completed within 
the worst-case response time determined in step A (IV) (3) 
and in step V, and 

2. scheduling all other processes on a best 
25 effort basis using remaining processor capacity. 
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